Static task
static1
Behavioral task
behavioral1
Sample
d391eb520c14a675319e169fb9170480_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d391eb520c14a675319e169fb9170480_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d391eb520c14a675319e169fb9170480_NeikiAnalytics
-
Size
42KB
-
MD5
d391eb520c14a675319e169fb9170480
-
SHA1
aa19381c8e4d90f2653e774e4cf86264d509b1ce
-
SHA256
27b437c22e3ec430d13a6b075c8696cfaba9fe48a78d134f5eabf37297ba7f67
-
SHA512
d7ff2f3c550cb50717bf89cdf49304726533f6a68d82c13cb01e58455fe8a45c8b67b97d3018750c2ce9f08758216e8c77a6b324563d9885a8d52f0f8de5e851
-
SSDEEP
768:ScYQzsA+c/DtIt8nBA00zhxZH8Ony9yrVCrSgj/y2i7WN1Wcjr9kb5mF:S5asbmBxYgErVCrxviCNs49ymF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d391eb520c14a675319e169fb9170480_NeikiAnalytics
Files
-
d391eb520c14a675319e169fb9170480_NeikiAnalytics.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE