Static task
static1
Behavioral task
behavioral1
Sample
1f1bfb18a8c2cb4c47aaec4f66787850_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
1f1bfb18a8c2cb4c47aaec4f66787850_NeikiAnalytics.exe
-
Size
599KB
-
MD5
1f1bfb18a8c2cb4c47aaec4f66787850
-
SHA1
44dd0b82019128cee9a32563c22ba50d691abf29
-
SHA256
db26602afc2b5e14f46c6cea950c653a482a094b72fe3727b1ba348745311e31
-
SHA512
7827c6fc8f91cd7d1e2306a0df1b78b2a9fb4ad4d77a7570f665395523897625f1a735424f1fedfa291041f7206aa2ba2c8d4619383a6a09fc63c47e7bbde693
-
SSDEEP
12288:z8nHBeRNfjODQ34nuhLdNQK7rMSbmHVFwtfqxkg9h:oHBeRNfjzhLd77QSVtf6F
Malware Config
Signatures
Files
-
1f1bfb18a8c2cb4c47aaec4f66787850_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
01:fb:89:c0Certificate
IssuerCN=Microsoft Window\ ,OU=Microsoft Window Web Tool,O=Microsoft Window Web Tool,L=Microsoft Window Web Tool,ST=Microsoft Window Web Tool,C=DK,1.2.840.113549.1.9.1=#0c1b4d6963726f736f667439343837404d6963726f736f66742e6e6574Not Before26/12/2020, 20:59Not After26/12/2022, 20:59SubjectCN=Microsoft Window\ ,OU=Microsoft Window Web Tool,O=Microsoft Window Web Tool,L=Microsoft Window Web Tool,ST=Microsoft Window Web Tool,C=DK,1.2.840.113549.1.9.1=#0c1b4d6963726f736f667439343837404d6963726f736f66742e6e6574ef:b1:ea:43:e1:a9:55:f1:1b:08:55:2a:15:8d:c7:26:98:af:ed:a1Signer
Actual PE Digestef:b1:ea:43:e1:a9:55:f1:1b:08:55:2a:15:8d:c7:26:98:af:ed:a1Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 570KB - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ