Static task
static1
Behavioral task
behavioral1
Sample
8a16d3e3fab81967fce17f8dd8d2ab80_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8a16d3e3fab81967fce17f8dd8d2ab80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
8a16d3e3fab81967fce17f8dd8d2ab80_NeikiAnalytics.exe
-
Size
296KB
-
MD5
8a16d3e3fab81967fce17f8dd8d2ab80
-
SHA1
e19939266cf813d053c6b2bcc36fd90935b886ff
-
SHA256
c279a0b64ff67c741a2b796aea272581e25ed73d3186e76b726fb9ad017bc45e
-
SHA512
eff4ad2086573aa87898ba24a2367cd87496ff6e555ed3ab2817262ff723482de96602c73fbeb052f29409f6f696e36f66a4c53e6a7d05bf7ac7c62dfeb91e9a
-
SSDEEP
3072:bJRKHjiQtJvXLrDx46QUdfEPReJ09iVB2UYdAa6B7MzU3NoynIAvJNr5t+rB:nKZLWUBYdgW4KQI8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a16d3e3fab81967fce17f8dd8d2ab80_NeikiAnalytics.exe
Files
-
8a16d3e3fab81967fce17f8dd8d2ab80_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
ce9b85f5a4b03f0db2e77efdd0a3141a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord519
ord660
Zombie_GetTypeInfo
ord591
ord669
ord592
ord300
ord301
ord595
ord303
ord305
ord306
ord520
ord307
ord309
ord632
EVENT_SINK_AddRef
ord527
ord528
ord560
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord712
ord314
ord315
ord607
ord316
ord608
ord716
ord319
ord534
ProcCallEngine
ord536
ord537
ord645
ord681
ord685
ord100
ord579
ord610
ord320
ord612
ord321
ord613
ord616
ord617
ord618
ord619
ord546
ord581
Sections
.text Size: 280KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ