Static task
static1
Behavioral task
behavioral1
Sample
1a9a32c5f6b0f8869a7bd794ddc98ac0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a9a32c5f6b0f8869a7bd794ddc98ac0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1a9a32c5f6b0f8869a7bd794ddc98ac0_NeikiAnalytics.exe
-
Size
65KB
-
MD5
1a9a32c5f6b0f8869a7bd794ddc98ac0
-
SHA1
813020e695cfe261a2c42e868df136179e69a58f
-
SHA256
869817b0b19dc80d51d56b2984f175a25d5e2c0c839b62692aeea1ca4c4600fb
-
SHA512
2db1e4dc448ab535d50649000b4606e512a700cd7475f881a7bc365459fa589083fee8e4aad7bac4fbbc7d5c37ec7f060a0808a04e8ea227a0967a2f680e0f8a
-
SSDEEP
1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Ouu:7WNqkOJWmo1HpM0MkTUmuu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a9a32c5f6b0f8869a7bd794ddc98ac0_NeikiAnalytics.exe
Files
-
1a9a32c5f6b0f8869a7bd794ddc98ac0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 49KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE