Static task
static1
Behavioral task
behavioral1
Sample
495f2b76f07e7ed1836e67a73063e9c67b786285da3aff935afd6fc5f0f1600d_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
495f2b76f07e7ed1836e67a73063e9c67b786285da3aff935afd6fc5f0f1600d_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
495f2b76f07e7ed1836e67a73063e9c67b786285da3aff935afd6fc5f0f1600d_NeikiAnalytics
-
Size
1.9MB
-
MD5
a6cf613b6ede57cfb54410024527cc00
-
SHA1
9270a8fd7b08b4f7f4740b47917b5c9298410f35
-
SHA256
495f2b76f07e7ed1836e67a73063e9c67b786285da3aff935afd6fc5f0f1600d
-
SHA512
9c77910a7dadf8a86691a2df9045f7c90a36cfb143df42fa4b0a14ebc43fb7dbb110e71a5db7abd8cb56e84c9f47c8a7fa7ec284d8ee56edf7d3f2ed44110a66
-
SSDEEP
49152:ISlNHydXboE+2pKWTvP6p9kB/GS0fsXCFl:ISjydNCYn0+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 495f2b76f07e7ed1836e67a73063e9c67b786285da3aff935afd6fc5f0f1600d_NeikiAnalytics
Files
-
495f2b76f07e7ed1836e67a73063e9c67b786285da3aff935afd6fc5f0f1600d_NeikiAnalytics.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fykeapla Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mfitzlay Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE