Static task
static1
Behavioral task
behavioral1
Sample
50fa043c831e98935226e708bf2ea9c0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
50fa043c831e98935226e708bf2ea9c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
50fa043c831e98935226e708bf2ea9c0_NeikiAnalytics.exe
-
Size
39KB
-
MD5
50fa043c831e98935226e708bf2ea9c0
-
SHA1
e55e61cf461226e3660e50158852a83cfef3719f
-
SHA256
402affc513ace83408d24785a498b782061aeae46aabbeb4ddbe7e44082ca6dc
-
SHA512
a8f67751eb16e8bdfde8c8c755187ad48e5d5cdd018473ee1c2e94f003fbd30dc03f4d39adf90e61350a22d508175938961b3eda0bec2c4ce6e9e8a6c87107aa
-
SSDEEP
768:OkwmjvBBeZrHvajfOJIEFRdlvqG4M9rvTgYEww:ODzryDOXFl4MV7W
Malware Config
Signatures
Files
-
50fa043c831e98935226e708bf2ea9c0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
5e:0a:da:3e:a5:22:4a:a5:4a:dc:e5:dc:17:cf:0d:67Certificate
IssuerCN=IGANET\\jgomezNot Before21-09-2022 15:49Not After21-09-2023 21:49SubjectCN=IGANET\\jgomez37:1a:06:69:58:99:6a:0f:d2:9e:61:c9:34:d6:74:7d:de:f5:05:1c:9a:32:64:cb:bc:3a:ff:a3:08:90:cc:78Signer
Actual PE Digest37:1a:06:69:58:99:6a:0f:d2:9e:61:c9:34:d6:74:7d:de:f5:05:1c:9a:32:64:cb:bc:3a:ff:a3:08:90:cc:78Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\jgomez\Desktop\programas KUNI\PROMOCIONES- ACTUALIZA VENTA DIRECTA\productos\obj\Debug\productos.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ