Static task
static1
Behavioral task
behavioral1
Sample
609383443203c823fec1bb120e3fa820_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
609383443203c823fec1bb120e3fa820_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
609383443203c823fec1bb120e3fa820_NeikiAnalytics.exe
-
Size
3.1MB
-
MD5
609383443203c823fec1bb120e3fa820
-
SHA1
48b0d208acc8d47d04cdc6cd13e4362088998b02
-
SHA256
7f1e478a70789a137b55b103c1307b789e08c1bb7654d4d2963f7de4322296cf
-
SHA512
f452a8a5e9dc4a2a9abe5aae53a07b2926d6477a587de16b8dc77f2ff11a64728a7341a4aeeef65e94076add8d6d7abfc3e401b313ddf16e0c5552bf223f06c2
-
SSDEEP
24576:hKeyxTAJj7PVWjxfVv9rYQHiojCn1dkFKAniXFdz1FC+bX2jIVOYC95Il4rKd19z:hKeyRAWdNGwiWCn1jz1FC+KgGK4W9JvF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 609383443203c823fec1bb120e3fa820_NeikiAnalytics.exe
Files
-
609383443203c823fec1bb120e3fa820_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
c6b0bd85f63e549c0536b6fceee78e43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetVersion
WriteFile
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharNextA
advapi32
RegOpenKeyExA
oleaut32
SysFreeString
Sections
.rdata Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ