GetAppUnknown
Static task
static1
Behavioral task
behavioral1
Sample
03c0cb62f3c54b65529209d946b28c70_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
03c0cb62f3c54b65529209d946b28c70_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
03c0cb62f3c54b65529209d946b28c70_NeikiAnalytics.exe
-
Size
2.0MB
-
MD5
03c0cb62f3c54b65529209d946b28c70
-
SHA1
2866c8dd8b593a7472ad9adaf5cd044eb91056a9
-
SHA256
08bf211b36844187b82e0079242ea7b0239ecfefef94b5d27472683cec825520
-
SHA512
5276e7a26c89a185c8f369665db66a83e5a1563f5bef304c42f5c250c81594ce35cacd0564ae965e22f6cbdafdb6ee565bb0f5b1fb896692b85062513dc2aab6
-
SSDEEP
49152:78+Sd2zml74BKzY7slWbIOocUSP2bn7UBc0kIs:Y1ymlUBKzMLbbkXcBDkZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03c0cb62f3c54b65529209d946b28c70_NeikiAnalytics.exe
Files
-
03c0cb62f3c54b65529209d946b28c70_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
a70a995443e2eadf42fb982dd19fbeb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GlobalLock
Exports
Exports
Sections
Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mnmoowvi Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hahfnfib Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE