Static task
static1
Behavioral task
behavioral1
Sample
5c942532bdbee702d20f06fb081a3380_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5c942532bdbee702d20f06fb081a3380_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5c942532bdbee702d20f06fb081a3380_NeikiAnalytics.exe
-
Size
134KB
-
MD5
5c942532bdbee702d20f06fb081a3380
-
SHA1
54c4884c172fff5f020dddd9dc4965c5c92e915e
-
SHA256
66feaf1d801e4ada8e5f779d0d4eb28566ba1f33e5164625badab24dccaed9d5
-
SHA512
9276af1413f6a01d281f53ccd75234f2f591261c9857e7b98531a5772f2352a062dc1f1afe009b89d05e0967aaeff1895b0128072ce5970297c002b800a658ec
-
SSDEEP
3072:xoB4LQhPDy7Mlgoo5y4UsFXto8arQFfBiD4at5CNIgq:iSMhtSyy+8aUFBQXv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c942532bdbee702d20f06fb081a3380_NeikiAnalytics.exe
Files
-
5c942532bdbee702d20f06fb081a3380_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
edd4eb8d46e1c7ee20a2f3e6c3260d9a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperA
kernel32
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
DeleteFileA
DosDateTimeToFileTime
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentThreadId
GetFileAttributesA
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetTimeZoneInformation
GetVersion
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
MultiByteToWideChar
ReadFile
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFilePointer
SetFileTime
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
Sections
AUTO Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 9KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ