Behavioral task
behavioral1
Sample
1265a345089455350e2ba8b8a6d2ecf0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1265a345089455350e2ba8b8a6d2ecf0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1265a345089455350e2ba8b8a6d2ecf0_NeikiAnalytics.exe
-
Size
30KB
-
MD5
1265a345089455350e2ba8b8a6d2ecf0
-
SHA1
946bb8d86d3bf9e4c8de848ca05d611774b55d09
-
SHA256
48f99731cc27a8953bf1852ee7ca96a601746d2ba2d738ca809a55a638a4e473
-
SHA512
7a5c066b1ed8428225031578ce5d99ea11b6b1480118b68480ea5c05285e74c62055e018f0f5bc054e904a200b4888f77d803412c550dc48d7b8d6798c26d761
-
SSDEEP
768:xEFgcqoHFKr4tYfECB8IyC/5EaSF3bngT7CGheZm:xId5HFKrmYf1ACBEaS4VheZm
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1265a345089455350e2ba8b8a6d2ecf0_NeikiAnalytics.exe
Files
-
1265a345089455350e2ba8b8a6d2ecf0_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE