Static task
static1
Behavioral task
behavioral1
Sample
fa4f86689295633c7ca08b548236eee0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa4f86689295633c7ca08b548236eee0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
fa4f86689295633c7ca08b548236eee0_NeikiAnalytics.exe
-
Size
4KB
-
MD5
fa4f86689295633c7ca08b548236eee0
-
SHA1
73440add796e65c842666dabc76180d045882376
-
SHA256
76fc6602807d422769cba476265c37a3bf417a1bebb64e32c1afc02ab0f8d05b
-
SHA512
6f699fb80b31b8e7023e9148eae90979f2909bd5052a8a40d7538ccc9b44403e4c4d54fb79cde9eca3dde4f2f3a0fe114190af6aad85b3a93d058510f7fa64d9
-
SSDEEP
48:Zw+HuADIxLIMDe48pBpOISgVnEsCKyli0ex60vgXqv4A7BLGeSio4GJ3Uh7D3v5T:Ze7neRBpygVEjliS4YqwKxGj4+MjvZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa4f86689295633c7ca08b548236eee0_NeikiAnalytics.exe
Files
-
fa4f86689295633c7ca08b548236eee0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
97a5ea0e9541a956434e6e2a45ef21b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileW
CreateProcessW
DeleteFileW
ExitProcess
GetComputerNameW
GetTickCount
GetFileSize
GetProcAddress
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
LoadLibraryA
SleepEx
VirtualAlloc
VirtualFree
VirtualProtect
wininet
HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile
InternetSetOptionW
ntdll
RtlDecompressBuffer
swprintf
shell32
ShellExecuteW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ