Static task
static1
Behavioral task
behavioral1
Sample
06509d183ce1515c24b41d849af40f40_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06509d183ce1515c24b41d849af40f40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
06509d183ce1515c24b41d849af40f40_NeikiAnalytics.exe
-
Size
60KB
-
MD5
06509d183ce1515c24b41d849af40f40
-
SHA1
2573680fc35f3d4524040b8524942067cfe08417
-
SHA256
bf696b12e98f9a1a0276f66220216cf2c582463d9e2353f35c6f763fa5e2df9f
-
SHA512
e2206e7c4be66e900f7c45f22257ef16470aca6f77bb792b448a56a74f57a6e4aa4756b0eac6c8a29a26bd8ee94b4377e99bef6dc73c548a5d8a6245213bf5a6
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHXM:btng54SMLr+/AO/kIhfoKMHdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06509d183ce1515c24b41d849af40f40_NeikiAnalytics.exe
Files
-
06509d183ce1515c24b41d849af40f40_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
a2bfa209044e11b72a41f731968fdff2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA
kernel32
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA
gdi32
CreateFontIndirectA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ