Static task
static1
Behavioral task
behavioral1
Sample
b612223036b132a3af7f7ba726fa8cd0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b612223036b132a3af7f7ba726fa8cd0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b612223036b132a3af7f7ba726fa8cd0_NeikiAnalytics.exe
-
Size
166KB
-
MD5
b612223036b132a3af7f7ba726fa8cd0
-
SHA1
18de8a9134a7d27696fdc9b107f2cc98780bbd24
-
SHA256
961dd127b4be1608e0d435b7e8fbce191fdc4a51b881993cf58bb80b67ad2bc8
-
SHA512
c37ffbe4e63749e701be6a02af79626609eaebb5093c97fb9fc1dec320dc9fa8d4c918d391378c3258b7348050bb52eed28c5f33029636734e8a47891ae36672
-
SSDEEP
3072:cEwZH7jpBnCzSMbP1NMBOoN7TPTH7xSOYC89Fw:cEw17tMSO1NMBO27LxSOK9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b612223036b132a3af7f7ba726fa8cd0_NeikiAnalytics.exe
Files
-
b612223036b132a3af7f7ba726fa8cd0_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
54c10ac97b481290a6c5fc6089f7f219
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperA
kernel32
CloseHandle
CreateEventA
CreateFileA
DosDateTimeToFileTime
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
FormatMessageA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentThreadId
GetDriveTypeA
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetTickCount
GetTimeZoneInformation
GetVersion
LoadLibraryA
LocalFileTimeToFileTime
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetFilePointer
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
Sections
AUTO Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 27KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ