Static task
static1
Behavioral task
behavioral1
Sample
8660da3b4965af7271744cba227f6890_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8660da3b4965af7271744cba227f6890_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8660da3b4965af7271744cba227f6890_NeikiAnalytics.exe
-
Size
608KB
-
MD5
8660da3b4965af7271744cba227f6890
-
SHA1
7d6719224eba4583dda871d8638d622b1faaf38b
-
SHA256
166ab9a5dc03cdf73e7799a8d2a51a88dc6d65735a44120a9f8228bcc73e100f
-
SHA512
b24f05c56f023316eb43e08db470343cc539c6c29e9929470d6f146631d67461d67e19213d41dc40e3358deb127b0ede409a82f56be98762d9956a1aa8c8447b
-
SSDEEP
12288:N6vMro9x27c/t1V/QrJu5kj9QKJgKE9perRn5Fry2FWWZEMDQQNODITeXEP+T:ecw/t1VGJu6jecgKEyrRn5kSEMDjQ8eU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8660da3b4965af7271744cba227f6890_NeikiAnalytics.exe
Files
-
8660da3b4965af7271744cba227f6890_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
34eeef453495a577cfc62daaa21309cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCapture
kernel32
GetCurrentThread
GetCurrentThreadId
GetThreadLocale
Sections
.text Size: 605KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 242B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE