Static task
static1
Behavioral task
behavioral1
Sample
26dcd16131fdbb1330c6e3d1d1ae4c30_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26dcd16131fdbb1330c6e3d1d1ae4c30_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
26dcd16131fdbb1330c6e3d1d1ae4c30_NeikiAnalytics
-
Size
91KB
-
MD5
26dcd16131fdbb1330c6e3d1d1ae4c30
-
SHA1
589c5c01a2cb214ea205df0d80db73be27ec2b70
-
SHA256
0607eec962e62d6f2737db2d364b72516a85fd04e9e9842e4956960dad6ffb2c
-
SHA512
fcd7f86f91add4e5012fa96a472b3b3459e91104778ad91639ccce23c7e62f5e5939e5d03bfe5cd553666e4d4704d9c6894cc44b559d407624e102fff25dba35
-
SSDEEP
768:E3gRYjXbUeHORIC4ZxBMldNKm8Mxm8I+IxrjPfAQ4o3ImuNf3gRYjXbUeHORIC4q:uT3OA3+KQsxfS4ET3OA3+KQsxfS45W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26dcd16131fdbb1330c6e3d1d1ae4c30_NeikiAnalytics
Files
-
26dcd16131fdbb1330c6e3d1d1ae4c30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 28KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE