Static task
static1
Behavioral task
behavioral1
Sample
91eeb2b5ab3454b114f6c25bef53d6b41ded49b6144197bafc467ee4367744e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
91eeb2b5ab3454b114f6c25bef53d6b41ded49b6144197bafc467ee4367744e0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
91eeb2b5ab3454b114f6c25bef53d6b41ded49b6144197bafc467ee4367744e0_NeikiAnalytics.exe
-
Size
35KB
-
MD5
5da6fac06e27ce59fbe6598260ab7c50
-
SHA1
f8e7a0154d7b2d187a10db1fecc9cd4a715864e4
-
SHA256
91eeb2b5ab3454b114f6c25bef53d6b41ded49b6144197bafc467ee4367744e0
-
SHA512
d58ebadd13f0fac6882993624278e4ce1fb31cca12a3a35406a32dc98d7152be02d1b659a7e34f56bd7d9bb3c8b5a95f9b164a1bdf54e24f0d19ac020293b0f2
-
SSDEEP
768:yObStF84KhRvzGdgpH8tyfiQeOPRz2LWUMZX/8q:9evCVLd8tuXeOZaLZgEq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91eeb2b5ab3454b114f6c25bef53d6b41ded49b6144197bafc467ee4367744e0_NeikiAnalytics.exe
Files
-
91eeb2b5ab3454b114f6c25bef53d6b41ded49b6144197bafc467ee4367744e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
3ba6010fa2b7d58dc680694f419d288d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
SizeofResource
VerLanguageNameA
LoadResource
VirtualFree
lstrlenA
GetModuleHandleA
GetCommandLineA
FindResourceA
VirtualAlloc
ExitProcess
user32
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
LoadMenuA
PostQuitMessage
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
DefWindowProcA
CreateWindowExA
BeginPaint
RegisterClassExA
EndPaint
gdi32
CreateCompatibleDC
DeleteDC
SelectObject
BitBlt
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ