Static task
static1
Behavioral task
behavioral1
Sample
a3fa8f7c0a2930d95900f8e2e397cd40_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a3fa8f7c0a2930d95900f8e2e397cd40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
a3fa8f7c0a2930d95900f8e2e397cd40_NeikiAnalytics.exe
-
Size
20KB
-
MD5
a3fa8f7c0a2930d95900f8e2e397cd40
-
SHA1
ae20d62fe94af52fd7e417d30e8781225db8eb42
-
SHA256
eca74b46bfd996a53b9e59515a5524008fae438f54c5c2d55fa8549c0ebd28fe
-
SHA512
219f40b243e635c24da488f803e4bf89fc22c802832ca502c648e4e3f4a390dc148f228e3523361e28cffb58dcb195a05c154e86157bf2bda516ed83f98d23e6
-
SSDEEP
384:xuuuuXa+LAp0zd8xUVQfpPgt8HONmUzbM8pFx2mjgVqmkbq4wPl/5pDGkzZ9Vj:k+Lc0B8xUVQfpPgtqONmUzbf7x2KSqLU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3fa8f7c0a2930d95900f8e2e397cd40_NeikiAnalytics.exe
Files
-
a3fa8f7c0a2930d95900f8e2e397cd40_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
22ffc0089d9bb846828c2a0316965d77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LZCopy
LCMapStringA
GetPrivateProfileIntA
GlobalSize
ResumeThread
VirtualFree
OpenFileMappingA
Thread32First
QueryInformationJobObject
WriteConsoleW
ReplaceFile
GetConsoleFontInfo
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE