Static task
static1
Behavioral task
behavioral1
Sample
d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics
-
Size
71KB
-
MD5
d9fb5f4d3d2a73486006054d08521440
-
SHA1
fe8218eaadf85eb241958b0a061f4d8eab07e4d3
-
SHA256
3390497fbfd1dc0a77e350cea939a9d63bf6937fefaee1b056ec820792b1c857
-
SHA512
cfdd8be2226eff2658816679bd0636ae43244b3bec33819c1d792d43ff7047e349f76e2d193a6c019c635cc518f8ff7675779e8dd3574a4218d9a92be90a51e5
-
SSDEEP
768:hZZ6Zyf9JseFPR3dwG0XD0kfLkctfkx1/pbFuWnJWFwnpmkFzCfxUOxrlpZ+pZk0:1kE3dF0XD0CLX2pbP0ue66aC/NQjD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics
Files
-
d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe windows:4 windows x86 arch:x86
e95e3c19c1b1846eddfe9b97188d572c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
ntdll
NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE