Static task
static1
Behavioral task
behavioral1
Sample
2b0cb70ec6b50e43b0f83a4bc85f260ccb22a11a825d9612d06bc6ee156cccb7_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b0cb70ec6b50e43b0f83a4bc85f260ccb22a11a825d9612d06bc6ee156cccb7_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2b0cb70ec6b50e43b0f83a4bc85f260ccb22a11a825d9612d06bc6ee156cccb7_NeikiAnalytics.exe
-
Size
166KB
-
MD5
69f9e7f25149c7d2b56ebb3a2696a930
-
SHA1
3a8b3254db3eca6dab19b7b5ba74bb4f8108b175
-
SHA256
2b0cb70ec6b50e43b0f83a4bc85f260ccb22a11a825d9612d06bc6ee156cccb7
-
SHA512
0007a9602627a27f2ff149250722d637e654b75690c37dd09c2e5e1a78b6cf576354888be48827cf5826205472f33b6d9391648bdaecfae1fa37de34f2869140
-
SSDEEP
3072:+nVJbukHK3mODJDa3tt+kfXoeBCKrJWEzF5VkV3+YdC8DRsqFK45H95mX:+VNuyqmGaRoeBCgWM56oYdC8DeqD+X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b0cb70ec6b50e43b0f83a4bc85f260ccb22a11a825d9612d06bc6ee156cccb7_NeikiAnalytics.exe
Files
-
2b0cb70ec6b50e43b0f83a4bc85f260ccb22a11a825d9612d06bc6ee156cccb7_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
c8beb8fcc873acf5a1eaff30f4170f94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
__p___initenv
_XcptFilter
_initterm
__setusermatherr
_exit
__getmainargs
calloc
strrchr
__set_app_type
_except_handler3
_controlfp
_putenv
realloc
free
_adjust_fdiv
sprintf
_iob
strncpy
malloc
__p__commode
__p__fmode
fprintf
python22
Py_NoSiteFlag
PyImport_Import
PyArg_ParseTuple
Py_Finalize
PyErr_Print
Py_InitModule4
PyRun_SimpleString
Py_GetPath
Py_Initialize
Py_SetProgramName
Py_OptimizeFlag
Py_VerboseFlag
PyString_FromStringAndSize
Py_SetPythonHome
PySys_SetArgv
PyModule_GetDict
PyObject_CallFunction
PyImport_ExecCodeModule
PyDict_New
PyDict_SetItem
PyDict_GetItemString
PyExc_KeyError
PyErr_SetString
PyInt_AsLong
PyString_FromString
PyInt_FromLong
kernel32
CreateFileA
FormatMessageA
UnmapViewOfFile
LocalFree
GetModuleFileNameA
MapViewOfFile
CloseHandle
CreateFileMappingA
GetLastError
GetFileSize
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ