Static task
static1
Behavioral task
behavioral1
Sample
3b9133b1d88f9254cce0f135e91f4540_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b9133b1d88f9254cce0f135e91f4540_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3b9133b1d88f9254cce0f135e91f4540_NeikiAnalytics.exe
-
Size
14KB
-
MD5
3b9133b1d88f9254cce0f135e91f4540
-
SHA1
91e4022bd988fdc40a45d3aaed66cddf1f5e3e5c
-
SHA256
5b6198357a81032923fa6b6b290d1add1e13797ddba58c61f0b245a90a06a328
-
SHA512
110924424b5c0709601f81f9da20403a1a74e6a86506c3717e3a6314a68a50c2b3b5d7ae1bd3b4d18500436a3b8b3e259d40bd47b75e2e261c911a191b91d8a9
-
SSDEEP
384:+lFWFFFFFFFFFFFFFFFyKvDE045Hu4Kqq:IWFFFFFFFFFFFFFFFyGAiqq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3b9133b1d88f9254cce0f135e91f4540_NeikiAnalytics.exe
Files
-
3b9133b1d88f9254cce0f135e91f4540_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
9a7554122604b2172eb9a8200bba01eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
ord60749
ord29360
ord25069
ord56963
ord60871
ord441
߰r���a����(���G����L7
ord65535
ord65535
VBVM60.DLL
�rt��rn�r@9�r���rHJ�r�I�r�r�r;ġrr���r/p�r�b�r}A�r�}�rġr�V�rlW�r���r� �r ár]��r:�r��r���r�G�r�}�r��r��r��rV�ru�rH�r}i�r+��rg��r=�ruB�r�:�r7��rV�r:�r:�rJl�r�ڡrl�rn�r��r���r�5�r/N�r�ơr�m�rף�rpu�rѷ�r�m�r���r0l�r r���rD��r�ơrݢr�k�r�m�rף�rpu�rѷ�r�m�r���r0l�r r���rD��r�ơrݢr�k�r��f�`f
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ