Static task
static1
Behavioral task
behavioral1
Sample
28a40876afcb31f18796493271a48840_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28a40876afcb31f18796493271a48840_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
28a40876afcb31f18796493271a48840_NeikiAnalytics.exe
-
Size
488KB
-
MD5
28a40876afcb31f18796493271a48840
-
SHA1
5c322d4bc30dd252bd389ca3ba4fd1888f9ec92f
-
SHA256
fb8b03854347bca8a4b7268be15773921c84846106a5b0b1a9d582368d8ca895
-
SHA512
79bb2a40dbd935a32dd5c4e0e8bc64223727ec91c9022e2ae280617d2ddbc4cb7e484b214108f0ed1650337713e922ea2bd81a7e5ff66e8e7962f630e2c261ec
-
SSDEEP
12288:V/M9/MP/Mx/M7/Mx/M4/MpBE/Mk/M2/M1:VCK2O2HIBEd7M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a40876afcb31f18796493271a48840_NeikiAnalytics.exe
Files
-
28a40876afcb31f18796493271a48840_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 52KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE