Static task
static1
Behavioral task
behavioral1
Sample
0d8224df8bb94641e3c8b2114ff29500_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d8224df8bb94641e3c8b2114ff29500_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0d8224df8bb94641e3c8b2114ff29500_NeikiAnalytics.exe
-
Size
65KB
-
MD5
0d8224df8bb94641e3c8b2114ff29500
-
SHA1
dd7134f504c749c5494ba251e1dbe2f9882f0462
-
SHA256
5bb2b6205ac7ea0ab1be1aba8dfc889ff98866d9afcbd4f3677a3dc84b9b4aea
-
SHA512
e671fb4d7dfe4ff245f8ef2c4796338c9b32ffd82d25402dea5a4ae2b13e300fb16bc430ff1fcc2670a53179195e75e819f2714daab188bfefdaaadf93dc2394
-
SSDEEP
1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oum:7WNqkOJWmo1HpM0MkTUmum
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8224df8bb94641e3c8b2114ff29500_NeikiAnalytics.exe
Files
-
0d8224df8bb94641e3c8b2114ff29500_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 49KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE