Static task
static1
Behavioral task
behavioral1
Sample
22bd1866afd16fffe198bf4176a595443c9ca010db660d309123f013c4c1ef7c_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22bd1866afd16fffe198bf4176a595443c9ca010db660d309123f013c4c1ef7c_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
22bd1866afd16fffe198bf4176a595443c9ca010db660d309123f013c4c1ef7c_NeikiAnalytics
-
Size
24KB
-
MD5
fd81fec8b048dc398abfa583c3f7cdf0
-
SHA1
30e3331d063fdd033aa472e73243350beadb16f3
-
SHA256
22bd1866afd16fffe198bf4176a595443c9ca010db660d309123f013c4c1ef7c
-
SHA512
74783f659fe5f53e72aacb1be291fd823c9d7d0f1c00196cf05b5c0f248b36d42ae161147ace362006dcff31ce3a3a395c80f7786733963f4fdd7ad4e96593ac
-
SSDEEP
384:b2AsyDTIWwt2JdtTsGH1ARxruGO8o+4tdmuQc1PbJiWmJCs:y+DT/jTsGVNQMfJif8s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22bd1866afd16fffe198bf4176a595443c9ca010db660d309123f013c4c1ef7c_NeikiAnalytics
Files
-
22bd1866afd16fffe198bf4176a595443c9ca010db660d309123f013c4c1ef7c_NeikiAnalytics.exe windows:4 windows x86 arch:x86
4517779c858c277fe37111eb804668e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
TranslateMessage
ShowWindow
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
BeginPaint
kernel32
VirtualFree
ExitProcess
GetCommandLineA
LoadLibraryA
VirtualAlloc
CreateFileA
GetProcAddress
lstrlenA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar
gdi32
CreateCompatibleBitmap
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
ole32
CoUninitialize
CoInitialize
CoCreateInstanceEx
oleaut32
SysFreeString
SysAllocStringLen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ