Static task
static1
Behavioral task
behavioral1
Sample
d22c2265bc04833fff96dacab180aa80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d22c2265bc04833fff96dacab180aa80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
d22c2265bc04833fff96dacab180aa80_NeikiAnalytics.exe
-
Size
631KB
-
MD5
d22c2265bc04833fff96dacab180aa80
-
SHA1
36b707c1a82ded61fbb315f7c1f7e2e5021259ce
-
SHA256
b0dcb94e1c683dc98fcc7839846fd8eff117998e0ec6c4831c6e934166b823d6
-
SHA512
dcddeebd9cff80a46caafcdd4011e1544c8f2f4f26856c5c8c4b34d08c2e6827acec523aae3c99a0f37687dc41014c43df1133c7d3beca73350cc8398fbd0747
-
SSDEEP
12288:5zXXeX20IeBetm2lKzVvjGe4RC36bpp4hmtv+FEDwZrLmGhpDVFXyF9bJvQIt:NXuXZIAea74RwOn4hmIqsZr9LDmF9bBD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d22c2265bc04833fff96dacab180aa80_NeikiAnalytics.exe
Files
-
d22c2265bc04833fff96dacab180aa80_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
3f95f2238c254dedadb5c87b4c2a2754
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
_hwrite
GetCurrentThread
FindNextVolumeW
SearchPathA
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
secur32
LsaDeregisterLogonProcess
AcceptSecurityContext
InitSecurityInterfaceW
LsaGetLogonSessionData
DeleteSecurityContext
DecryptMessage
tapi32
lineMakeCallA
lineShutdown
lineGetDevCaps
lineOpen
MMCGetLineInfo
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 275KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 275KB - Virtual size: 378KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ