Static task
static1
Behavioral task
behavioral1
Sample
3cf0a12513be5f0b968694f5485c7d90_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3cf0a12513be5f0b968694f5485c7d90_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
3cf0a12513be5f0b968694f5485c7d90_NeikiAnalytics.exe
-
Size
65KB
-
MD5
3cf0a12513be5f0b968694f5485c7d90
-
SHA1
d1d70a5768d748316e34da853ff91999af01571e
-
SHA256
17415d6edaa103f767ca56c8222ac1895bed8a0ab04ffeaf2a4c08050c842cd6
-
SHA512
f98a62ac5a548796d21f8a9e0c658a4026dde8af4d3b93cbf793d51d49f69cf5842349f755059cf029237dedf9f593ab80fb2adc6f1b71db771382a282c353d6
-
SSDEEP
768:Erz0HpeAgh7Gl4E4DYxzA/xcMMpwO3cGeGffz7TnbLHPX3jUI9jTvfrD7/HzLP3U:EOp1g7GSQ8/xcMXOEG7GmpYYcS5YeC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cf0a12513be5f0b968694f5485c7d90_NeikiAnalytics.exe
Files
-
3cf0a12513be5f0b968694f5485c7d90_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
e95e3c19c1b1846eddfe9b97188d572c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
ntdll
NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE