Static task
static1
Behavioral task
behavioral1
Sample
df285ab95bb4c5c58cbf3ec811a99550_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
df285ab95bb4c5c58cbf3ec811a99550_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
df285ab95bb4c5c58cbf3ec811a99550_NeikiAnalytics
-
Size
1KB
-
MD5
df285ab95bb4c5c58cbf3ec811a99550
-
SHA1
12607a24c9e4007538313fafca37c7f0f297a5e8
-
SHA256
8fa75ab7a64398f324146f589692c324d6d1bc9fa2ce14a0dfda121efc3e39c5
-
SHA512
367fa4e6fbe24155f2107bb0352ed1c493e028b548fad240a628208969ac54a05bbe59cae416b8d9e4a6e298d9abce3a9c1e231e213a84a2a953a8ce7877d53d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df285ab95bb4c5c58cbf3ec811a99550_NeikiAnalytics
Files
-
df285ab95bb4c5c58cbf3ec811a99550_NeikiAnalytics.exe windows:1 windows x86 arch:x86
d8316a0fe0c772bead9f908b22ec540c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
GetFileAttributesA
GetProcAddress
LoadLibraryA
Sleep
WinExec
_lclose
_lcreat
_lwrite
Sections
.text Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE