Static task
static1
Behavioral task
behavioral1
Sample
02403836fb16c408797a1e9d36c25c90_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
02403836fb16c408797a1e9d36c25c90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
02403836fb16c408797a1e9d36c25c90_NeikiAnalytics.exe
-
Size
145KB
-
MD5
02403836fb16c408797a1e9d36c25c90
-
SHA1
2f7374d22488f0546a408e740b59f509a3289f97
-
SHA256
37558ad6be8e846276334614f64c3d6945cde206165aab9cd6c30d28dca838dc
-
SHA512
9e8a92d02a8fef9370e8e2585157e0b03352ea353f220332a9b5ac7a7e6277c8c5c01e24799dadbfa7694b4027150260e38b0b3a9d2e7a3f7a8185708c6ad314
-
SSDEEP
3072:MHLG6Xkuwh2ntk2LzSV0aKs6FNdeufWT+Z82YYixDbNSxYi4XIpXuoNj:MrGGS2ntkY1FNZuyq2eDbf4pXuoN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02403836fb16c408797a1e9d36c25c90_NeikiAnalytics.exe
Files
-
02403836fb16c408797a1e9d36c25c90_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
3d289df6b9c7102d3e84d76e331f7894
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetStartupInfoA
lstrlenA
LoadLibraryA
crtdll
__GetMainArgs
exit
raise
signal
ntdll
NtWaitForSingleObject
wininet
InternetQueryOptionA
gdi32
SetPixel
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
GetDeviceCaps
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
LoadIconA
LoadStringA
SendMessageA
MessageBoxA
GetClientRect
InvalidateRect
EndPaint
BeginPaint
LoadCursorA
PostMessageA
DispatchMessageA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 338B - Virtual size: 338B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ