Static task
static1
Behavioral task
behavioral1
Sample
a2bee48068a6a47398ccf43380253750_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a2bee48068a6a47398ccf43380253750_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
a2bee48068a6a47398ccf43380253750_NeikiAnalytics.exe
-
Size
196KB
-
MD5
a2bee48068a6a47398ccf43380253750
-
SHA1
df01b1011b0689cdd99752dced8ddbaac9a73a81
-
SHA256
d82dc84cf0c5e3876141fb7298ec09097030cea84b52851e9a55691c856b097e
-
SHA512
a9b387116155b6b62c3af52f7588af90c3f2873add2f7324599da6f401d9c3c427ed2606cfdcc96bda59a30da949ba1e66ee60c250bd5b3978c59bd251b0b06b
-
SSDEEP
3072:2ojRP4Kahy9KLUVN6epiyR9V604LFWt0coVJYV:laGp3P/4LFWt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2bee48068a6a47398ccf43380253750_NeikiAnalytics.exe
Files
-
a2bee48068a6a47398ccf43380253750_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
1114c59535449ebc4b42cbde46a17d5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord931
ord518
ord935
ord943
ord524
ord932
ord707
ord205
ord50
ord933
ord934
ord109
ord937
ord818
ord209
ord373
ord930
ord241
ord522
ord946
ord949
ord218
ord479
ord520
ord247
ord581
ord332
ord316
ord616
ord399
ord912
ord712
ord835
ord409
ord882
ord351
ord952
ord405
ord917
ord568
ord567
ord396
ord254
ord528
ord879
ord437
ord434
ord183
ord239
ord240
ord478
ord266
ord433
ord787
ord336
ord334
ord899
ord375
ord431
ord860
ord843
ord587
ord591
ord885
user32
ord420
ord60
ord197
ord274
ord151
ord572
ord444
ord199
ord596
ord595
ord512
ord347
ord404
ord584
ord65
ord150
ord440
ord373
ord659
ord567
ord276
ord269
ord562
ord256
ord83
ord86
ord156
ord641
ord326
ord367
ord253
ord363
ord710
ord555
ord438
ord350
ord159
ord457
ord477
ord97
ord57
gdi32
ord407
ord423
ord574
ord536
ord59
ord365
comdlg32
ord110
shell32
ord139
ord140
ord313
ord359
ord273
encmpa
ord2
ord8
ord9
ord5
ord6
ord3
ord1
ord7
ord4
facehelp
ord38
ord35
ord1
ord25
ord30
ord12
ord13
ord11
ord33
ord32
ord29
ord7
ord8
ord9
ord6
ord34
comctl32
ord5
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE