Static task
static1
Behavioral task
behavioral1
Sample
aa52965967aac3f8cf32e87f15bd73e0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
aa52965967aac3f8cf32e87f15bd73e0_NeikiAnalytics.exe
-
Size
97KB
-
MD5
aa52965967aac3f8cf32e87f15bd73e0
-
SHA1
72fdd4d58f29e49dc928f5e0025877440f781553
-
SHA256
f6e806916df8abb37a6ba1de99ac129df6511b70a7f0c1162abbcb0b94928beb
-
SHA512
035aa81de96f66864a63d8b421d2f2ea3aeedacb192b23fbb090ef5d7a98f3b20122f4b3711f18ddebacffc70dc2343756a3c3ad381ff6901defbf8253f62dee
-
SSDEEP
1536:xfIRU/rhuaLuBS3Bqvxuztv0Rsq1lzKR7xzEP9jY+/NGyjqS:tIRknYv8VCl+RpEdh/oyOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource aa52965967aac3f8cf32e87f15bd73e0_NeikiAnalytics.exe
Files
-
aa52965967aac3f8cf32e87f15bd73e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE