Static task
static1
Behavioral task
behavioral1
Sample
ad38f6ab7c54ca1faab150df1a6ff400_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ad38f6ab7c54ca1faab150df1a6ff400_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
ad38f6ab7c54ca1faab150df1a6ff400_NeikiAnalytics.exe
-
Size
61KB
-
MD5
ad38f6ab7c54ca1faab150df1a6ff400
-
SHA1
e364f3294c0bd3f8f9c0565940f89aabb05caa20
-
SHA256
cd023102e13c3702bec691ddf1b2c1802c0536d067dcefe8d2069968798dc541
-
SHA512
cb87e31bc0e871e16e800fb8a1dbe0c4778acf02fe1d93260b7b3afc5a3e18b24b118c85c9f3f942effc8bf800af76caa65f7d2f60541a1f6f599ac31f6967d4
-
SSDEEP
768:0Ku7M83OsD+I8HNDdlTSXq1eQ3H4+FpR+nYBbfoD:5cOsD+I8HhEqRF99bM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad38f6ab7c54ca1faab150df1a6ff400_NeikiAnalytics.exe
Files
-
ad38f6ab7c54ca1faab150df1a6ff400_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
ca493c3ccf68b676fe34cfa87494e1a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
SendMessageA
MessageBoxA
PostMessageA
DispatchMessageA
GetMessageA
SetScrollInfo
SetWindowTextA
EndDialog
GetDlgItem
DestroyCursor
ScrollWindow
CharLowerA
ShowCursor
TranslateMessage
DestroyMenu
kernel32
CloseHandle
GetTickCount
GetStartupInfoA
CreateDirectoryA
GetModuleHandleA
gdi32
GetTextExtentPoint32A
comctl32
ord17
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 746B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE