Static task
static1
Behavioral task
behavioral1
Sample
4c577263758c39c683b9f701cde7d719dd3cae12e4c94ec6c8f6065c7de6750b_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c577263758c39c683b9f701cde7d719dd3cae12e4c94ec6c8f6065c7de6750b_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
4c577263758c39c683b9f701cde7d719dd3cae12e4c94ec6c8f6065c7de6750b_NeikiAnalytics.exe
-
Size
38KB
-
MD5
667af07796a5fa144658336a30e21ce0
-
SHA1
989cdf34a6f3c5865211ce6771189f8ac64e74aa
-
SHA256
4c577263758c39c683b9f701cde7d719dd3cae12e4c94ec6c8f6065c7de6750b
-
SHA512
553e161a4ac5e00c4b08b749166e5e2950322f63cf2edc93d96cb0b6d9916d8e03b3c7f1196505d2fa5ccb92e41c56e3cd310454f51a2eb4338d39f6fa5bbc76
-
SSDEEP
768:YkAWBF5PJd1KgHDHME5OHeUsIdXKwowow:IW9xHjsaO5bd9Now
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c577263758c39c683b9f701cde7d719dd3cae12e4c94ec6c8f6065c7de6750b_NeikiAnalytics.exe
Files
-
4c577263758c39c683b9f701cde7d719dd3cae12e4c94ec6c8f6065c7de6750b_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
abdc512ea5ce3e73c0b63ca86f818d64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
MessageBoxW
SendMessageW
CreateWindowExW
RegisterClassExA
EndDialog
GetDlgItem
DialogBoxIndirectParamW
ClientToScreen
wsprintfW
GetDialogBaseUnits
kernel32
GetStartupInfoA
GetModuleHandleA
GetFileSize
CloseHandle
CreateFileW
msvcrt
_except_handler3
__set_app_type
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__p__fmode
_exit
_XcptFilter
exit
__p__acmdln
__getmainargs
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ