Static task
static1
Behavioral task
behavioral1
Sample
0ebbf6003c25fdfdcb8174331c7abcd0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ebbf6003c25fdfdcb8174331c7abcd0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0ebbf6003c25fdfdcb8174331c7abcd0_NeikiAnalytics.exe
-
Size
67KB
-
MD5
0ebbf6003c25fdfdcb8174331c7abcd0
-
SHA1
43d06b4a822726290cdba6d65293373fd92e23fe
-
SHA256
b1f449489493762f37871fa0a8927e5aa07c38481c28e78891e0ec3597b6fb03
-
SHA512
721d6765d3b49d685f0e26fdf930804a08334b21149459fe130d6c7348e1e64431de6c02bd0e18198041ba3766a1624bb97e770166010a7cc8d7611c64aee583
-
SSDEEP
384:ytiLtrFxJlzUEXYxsZClkwSwCRmiYPoboW/iizNlSC0MXxibXSRAPuWk5Hw0Vd5n:F1pClzghD5k5SUWwM/ErTxjRfPC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ebbf6003c25fdfdcb8174331c7abcd0_NeikiAnalytics.exe
Files
-
0ebbf6003c25fdfdcb8174331c7abcd0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
d5f9c819c38b98935c325c9d565c6fec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord513
ord822
ord795
ord511
ord793
ord447
ord444
ord377
ord722
ord406
ord318
ord443
ord364
ord512
ord811
ord594
ord304
ord309
ord657
ord419
ord517
ord509
ord515
ord346
ord765
ord476
ord329
ord441
ord397
ord550
ord551
ord574
ord291
ord558
ord305
ord784
ord312
ord553
ord544
ord849
ord307
ord395
ord362
ord248
ord565
ord497
ord560
ord855
ord864
ord365
ord216
ord503
ord858
ord415
ord827
user32
ord251
ord451
ord93
ord318
ord421
ord143
ord12
ord187
ord525
ord569
ord406
ord147
ord279
ord55
ord592
ord417
ord415
ord256
ord185
ord473
ord341
ord579
ord396
ord343
ord255
ord54
ord581
ord183
ord344
ord535
ord254
ord237
ord249
ord212
ord498
ord670
ord536
ord425
ord486
ord513
gdi32
ord170
ord161
ord176
ord351
ord371
shell32
ord285
ord288
ord266
ole32
ord215
ord192
ord227
ord229
ord228
comctl32
ord17
ord23
facehelp
ord21
ord14
ord16
ord22
ord20
ord15
httpfile
ord8
ord11
ord6
ord7
ord3
ord9
ord2
ord1
ord10
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 979B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ