Static task
static1
Behavioral task
behavioral1
Sample
05e0a3b2db5627cec5263d1b00c8df385964a392a5ede11a169cf265ea5eb031_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05e0a3b2db5627cec5263d1b00c8df385964a392a5ede11a169cf265ea5eb031_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
05e0a3b2db5627cec5263d1b00c8df385964a392a5ede11a169cf265ea5eb031_NeikiAnalytics.exe
-
Size
2.3MB
-
MD5
7951a05fbe8f9bfcf8fb5c2874bf64b0
-
SHA1
495195963b06ab3893a037b2d9cf1443114b9144
-
SHA256
05e0a3b2db5627cec5263d1b00c8df385964a392a5ede11a169cf265ea5eb031
-
SHA512
0a6f9d8f359fdf41a6937f858645fa21ac23cc546244b2dc5a4e3eca288ab75b3a06d998b65eca9406a7f1e946a8488223f04a474ec293b1f093703a680305c0
-
SSDEEP
49152:tlDJRrvf63NSW5Ye+g/aAaKvDiXmdhCjerO8YgcDLHlQnHsSamPt8q:tlbC3NSW5Ye+gCQrcjerQh9QnMXWt8q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e0a3b2db5627cec5263d1b00c8df385964a392a5ede11a169cf265ea5eb031_NeikiAnalytics.exe
Files
-
05e0a3b2db5627cec5263d1b00c8df385964a392a5ede11a169cf265ea5eb031_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 398KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nrbhwfhk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nrhbakgv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE