Static task
static1
Behavioral task
behavioral1
Sample
4647a8265e894ceef61931841eb3b48e3883624699ac1a233a1dfc684e2f36cf_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4647a8265e894ceef61931841eb3b48e3883624699ac1a233a1dfc684e2f36cf_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4647a8265e894ceef61931841eb3b48e3883624699ac1a233a1dfc684e2f36cf_NeikiAnalytics
-
Size
358KB
-
MD5
cae84e318aa884cab191b6c6ca850110
-
SHA1
86cc0da85875a888b366c7f847d8a3ea087a9a56
-
SHA256
4647a8265e894ceef61931841eb3b48e3883624699ac1a233a1dfc684e2f36cf
-
SHA512
4a3a92f0f69fd3b4d12d59bbc2f9d4e4333ec6ec23edae52f5a25c089d30140e284984fa31afea78a03ec6cd5b7a8aa253b16d43d7d2e543dbb538ebbf6f1230
-
SSDEEP
6144:safcE1xphbXDsBRHJeqqqdNPv04NIdmQ:RXzwHJeS730XwQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4647a8265e894ceef61931841eb3b48e3883624699ac1a233a1dfc684e2f36cf_NeikiAnalytics
Files
-
4647a8265e894ceef61931841eb3b48e3883624699ac1a233a1dfc684e2f36cf_NeikiAnalytics.exe windows:4 windows x86 arch:x86
3e3d633779e35448851e7a9ca7e72522
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
Sections
.MPRESS1 Size: 163KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ