Static task
static1
Behavioral task
behavioral1
Sample
61b3cc1beedf02d28468b7925f89cf50_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
61b3cc1beedf02d28468b7925f89cf50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
61b3cc1beedf02d28468b7925f89cf50_NeikiAnalytics.exe
-
Size
35KB
-
MD5
61b3cc1beedf02d28468b7925f89cf50
-
SHA1
33689a067d65d255d4d3a67a6feb05ff76b39d43
-
SHA256
09327862e037105898092459d5e7db9824ee746a5666a611d78046b5ffc01ad0
-
SHA512
b58f182114c1bb133164fa3cd2c7e327c3e410bca1e8ec6940e9784b4d5c3900d64c147555726eebf32292ef0544303411e8732b2a491432613423f3c13a0fe1
-
SSDEEP
384:SdtxuUV89lb5NKjSyC8bAHcQvRj9n7HdcDWziHFmfi3RfR6PNoNZA9i:oqP9SSyC8ucWl97cFmEf8lol
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61b3cc1beedf02d28468b7925f89cf50_NeikiAnalytics.exe
Files
-
61b3cc1beedf02d28468b7925f89cf50_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
807348b7bad6f5d642007a70e1c52008
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetActiveWindow
IsChild
GetDlgItem
EndDialog
SetFocus
SetCapture
SendMessageA
MessageBoxA
TranslateMessage
DispatchMessageA
GetMessageA
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
DialogBoxParamA
GetDlgItemTextA
kernel32
GetProcessHeap
CloseHandle
GetVersionExA
HeapAlloc
comctl32
ord17
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ