Static task
static1
Behavioral task
behavioral1
Sample
03b036364c7c955c4938ae2c17daf200_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03b036364c7c955c4938ae2c17daf200_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
03b036364c7c955c4938ae2c17daf200_NeikiAnalytics.exe
-
Size
63KB
-
MD5
03b036364c7c955c4938ae2c17daf200
-
SHA1
16c1e006bf03a889c43f32ae8e1ea0d940ff3e0f
-
SHA256
998982b2b4a7a551f2b7d7fa6b80f0dc660f69d1027a8846ee2b4f74d881013b
-
SHA512
85d51c0f91664ee4b7bf33070895f7225451f36a8608dcab14d9efc8f32af4f9e7ce91f30af40fdf391065af2aa1fc5d873f2b6c2333a747f31ce84647e9f3ae
-
SSDEEP
1536:K/Kpf+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:0KpsHwo8soECAKzAde
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03b036364c7c955c4938ae2c17daf200_NeikiAnalytics.exe
Files
-
03b036364c7c955c4938ae2c17daf200_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
5acdad458b447606a2d0acf7b71393ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
TlsAlloc
SetFirmwareEnvironmentVariableW
IsBadWritePtr
GetShortPathNameW
SetUnhandledExceptionFilter
CopyFileExA
IsValidLanguageGroup
GetProfileSectionW
NlsGetCacheUpdateCount
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE