Static task
static1
Behavioral task
behavioral1
Sample
25e3fca9c83f65de2a92564ce96d0470_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25e3fca9c83f65de2a92564ce96d0470_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
25e3fca9c83f65de2a92564ce96d0470_NeikiAnalytics.exe
-
Size
66KB
-
MD5
25e3fca9c83f65de2a92564ce96d0470
-
SHA1
4b3f066ebf0f641e4120e203076a314b9810de8e
-
SHA256
6da982064cc5ec07aefc057b4b4c0ff0f9cc4e238a7fae46c01aad0690148548
-
SHA512
feeb8fde2ef20daff46288fb52975e6b746cb2c3e214ffe367b17eabe167d9e94b26e3dd807de0d47da0dd3f56057754d66b0e4391dfd16f07bb40d0e8fba0f6
-
SSDEEP
1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXiTAAAAAAAAAAAAAAAAAAAAG:IeklMMYJhqezw/pXzH9iTAAAAAAAAAAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e3fca9c83f65de2a92564ce96d0470_NeikiAnalytics.exe
Files
-
25e3fca9c83f65de2a92564ce96d0470_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 50KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE