Static task
static1
Behavioral task
behavioral1
Sample
19031fd2c15d758ec9a8a26af54ebef27bb53ff90ea89ea658cec1aef62bf435_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19031fd2c15d758ec9a8a26af54ebef27bb53ff90ea89ea658cec1aef62bf435_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
19031fd2c15d758ec9a8a26af54ebef27bb53ff90ea89ea658cec1aef62bf435_NeikiAnalytics.exe
-
Size
23KB
-
MD5
653c5faa6003a5f9a306c856b55976b0
-
SHA1
8718ec3e540226eb07aa8dae0277aee4067012fb
-
SHA256
19031fd2c15d758ec9a8a26af54ebef27bb53ff90ea89ea658cec1aef62bf435
-
SHA512
0fbf8c912c9ee22b96242c58bec81f706836fd0fce2b4e2931826b27076299a84f61943c1c7375fca9aa47fb26d6a72ec14608a3c4587cd33e372097a5e599f4
-
SSDEEP
192:aEziYIk7VQ5ANWF5shCC0dbYzfmuPMoDlUvDje2A2z4puuLTEef3sfrpEBgOWtaQ:aENVb0db0+69lCS2N4pkGkNN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19031fd2c15d758ec9a8a26af54ebef27bb53ff90ea89ea658cec1aef62bf435_NeikiAnalytics.exe
Files
-
19031fd2c15d758ec9a8a26af54ebef27bb53ff90ea89ea658cec1aef62bf435_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
e74c31d11e7570d6571da70016af25f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcW
PostQuitMessage
SendMessageW
CreateWindowExW
ShowWindow
UpdateWindow
LoadCursorA
LoadIconA
RegisterClassExW
LoadStringA
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DestroyWindow
LoadAcceleratorsW
kernel32
GetModuleHandleA
ExitProcess
GetCommandLineA
HeapAlloc
GetProcessHeap
lstrcpynW
CloseHandle
GetStartupInfoA
ReadFile
CreateFileMappingW
comctl32
InitCommonControlsEx
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1002B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ