Static task
static1
Behavioral task
behavioral1
Sample
d8d6cca177852e0fa4f40babf143c300_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
d8d6cca177852e0fa4f40babf143c300_NeikiAnalytics.exe
-
Size
65KB
-
MD5
d8d6cca177852e0fa4f40babf143c300
-
SHA1
3073250de426aafaf6688c7ed733c6eb227ca9d1
-
SHA256
00cbe635abf846171537ca55cf16ce731c00df3eaa8f796bb5c1540faee4de20
-
SHA512
9844d2b7db6d2abd381dd164845b06893c533a48f1043b1ad4a66864a84e3b07035d9b73396666c2163e5c4e1d4425726af27bc0fa94e0e76b4c02fa0c8a62f3
-
SSDEEP
768:exsngl2T0XbYjavffdB4midpGMSpRCqvPGqWKymUUgC0w21UfvczaN4cVoDL3Mdk:IsDTE8javNGnqlfUUIw2Cv1of3MQd5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d8d6cca177852e0fa4f40babf143c300_NeikiAnalytics.exe
Files
-
d8d6cca177852e0fa4f40babf143c300_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE