Static task
static1
Behavioral task
behavioral1
Sample
d7c29578e35b89d76493c61046858ff0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7c29578e35b89d76493c61046858ff0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
d7c29578e35b89d76493c61046858ff0_NeikiAnalytics
-
Size
1.4MB
-
MD5
d7c29578e35b89d76493c61046858ff0
-
SHA1
0485620a0144280bdc2260b4b37349311bf657fb
-
SHA256
b407d5da5ad9818ee9952684d1d33a52ec9fd1a95d6f7ddb26a5cfa3e50de972
-
SHA512
3c6c6f2d914e08e184caac7393e5ab8ffa794a0ef61fc266851bfcf952bb5f7363d36579eb5bbe68d7b0d004ba6733f9f0098230e06b46c703d27b71042ac405
-
SSDEEP
24576:R0AFy3+n0Qbil2K8mRi/F3c85C3cQ7z6SeuoMEJivCjor4oUgo:Rbku0QbI24RaF3coC3cQX6SePJi6jorm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7c29578e35b89d76493c61046858ff0_NeikiAnalytics
Files
-
d7c29578e35b89d76493c61046858ff0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
530833577b0dd943540d06d6e801c13c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
wininet
FindNextUrlCacheEntryA
Sections
CODE Size: 1.3MB - Virtual size: 17.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE