Static task
static1
Behavioral task
behavioral1
Sample
6a80e96716a59d5587efa91324290fe0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a80e96716a59d5587efa91324290fe0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6a80e96716a59d5587efa91324290fe0_NeikiAnalytics.exe
-
Size
20KB
-
MD5
6a80e96716a59d5587efa91324290fe0
-
SHA1
85b9a87546a5e76ed227ee0d297f35dd0bbd93d5
-
SHA256
33da3dbf8c77f256790937fa1084c805d8314e0bb2b8257017fcf61b7b53f8da
-
SHA512
1d7b60f5f4bbf7202007c8852f3aeee41124a04de03b4cad8bff88afb6afde1562540d2056b507cf39e670ad36a928f8304965116c4e85d309c5873da3f71276
-
SSDEEP
384:6e4U+++748Hx2Xw72iki6RSecL9z8ZEcOELqSNwPl/5pDGkzZ9Vj:p8R2/nhSeG9zrcOELNN+/qkV9Vj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a80e96716a59d5587efa91324290fe0_NeikiAnalytics.exe
Files
-
6a80e96716a59d5587efa91324290fe0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
86306f63c59e7ba9f44a191f01744036
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrencyFormatW
GetConsoleDisplayMode
IsValidLocale
ConsoleMenuControl
GetFullPathNameW
PeekConsoleInputA
LoadModule
SetComputerNameExA
MoveFileWithProgressA
SetCommBreak
WinExec
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE