Behavioral task
behavioral1
Sample
6f5511b8a196dfdeda27bc0508f6bc80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6f5511b8a196dfdeda27bc0508f6bc80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
6f5511b8a196dfdeda27bc0508f6bc80_NeikiAnalytics.exe
-
Size
30KB
-
MD5
6f5511b8a196dfdeda27bc0508f6bc80
-
SHA1
a9569badab62d525cea0a464b3b17b88eaa62d72
-
SHA256
432e5d36eb861ac23b6d17d6b968d74280c7c9f229ca98588026e086f1c6684c
-
SHA512
39e1a0335cbc4a28dbb575f2b0d7de37ee3d831047d3729fffea65ed15a84e6375dbce08b2f82b913e9693d6f5e15033c9256b5c39a1507cc7fee79762c3610d
-
SSDEEP
384:jaE1rXRO1Odnpk2XTRdHzrDrzVlp/TxFftzoaHKdpVwVjDcc/7FEf6Af9s7HtJBy:/rQMpk2XrrplzdHUwFtDbC9s7NJ7Xt
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6f5511b8a196dfdeda27bc0508f6bc80_NeikiAnalytics.exe
Files
-
6f5511b8a196dfdeda27bc0508f6bc80_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE