Static task
static1
General
-
Target
7a6738b1f10fdf6b1f89de3e34445ca0_NeikiAnalytics.exe
-
Size
948KB
-
MD5
7a6738b1f10fdf6b1f89de3e34445ca0
-
SHA1
7db086950ab6d9cfc50987b54c36f18a9a988dcf
-
SHA256
ad515d78f101fc4c0f7ab48e31e65563ba01e3101290190303be36180384f119
-
SHA512
dbd37eb6468dcec2626e4cc289c7682b96945f19af7691daf8faa19b63dd855cadbdf87604f05d89e476fff210906f513f8660bb427855306914db3c9a60c4ba
-
SSDEEP
12288:Kl+In0fGfYuos28IkHhSwvtUKMALo0RNRUCCT10sf7ZI0AW3TbUz0f/u3jctYQ:DI0f2oRNcSwCO8APj03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a6738b1f10fdf6b1f89de3e34445ca0_NeikiAnalytics.exe
Files
-
7a6738b1f10fdf6b1f89de3e34445ca0_NeikiAnalytics.exe.sys windows:5 windows x86 arch:x86
63fd28b3203dab569f10d25b204242c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
scsiport.sys
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortWritePortUchar
ScsiDebugPrint
ScsiPortGetDeviceBase
ScsiPortWritePortBufferUshort
ScsiPortReadPortBufferUshort
ScsiPortReadPortUchar
ScsiPortInitialize
ScsiPortWritePortUshort
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 352B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ