Static task
static1
Behavioral task
behavioral1
Sample
65c3635c145707772d7c7ea36825d9589ad3c71ffaeb2d5e09e15fe058bafd48_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
65c3635c145707772d7c7ea36825d9589ad3c71ffaeb2d5e09e15fe058bafd48_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
65c3635c145707772d7c7ea36825d9589ad3c71ffaeb2d5e09e15fe058bafd48_NeikiAnalytics.exe
-
Size
49KB
-
MD5
36640ac29639b4a6b3145679c59d1360
-
SHA1
364ab72264adad4966f7a04ab6cf7d2e3f6c57d5
-
SHA256
65c3635c145707772d7c7ea36825d9589ad3c71ffaeb2d5e09e15fe058bafd48
-
SHA512
91a1e57722e432167b5f999d899ad0f4eeda013304ddf71574651caff627580f36143b70233c67e10c10d25022eb5ab428448d799aeb68f072659e363e9ec51d
-
SSDEEP
768:hAvJ4LSyC8aVN7bX3V0S0AVrEXAgTlxorsf8ISnSxi5:2B4OyC8aVN7jljBmpOrs83nSxw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65c3635c145707772d7c7ea36825d9589ad3c71ffaeb2d5e09e15fe058bafd48_NeikiAnalytics.exe
Files
-
65c3635c145707772d7c7ea36825d9589ad3c71ffaeb2d5e09e15fe058bafd48_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
cf19f3378b2e9b39476b07800e274748
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
SetFocus
DialogBoxParamA
SendMessageA
GetDlgItem
TranslateMessage
DispatchMessageA
GetMessageA
IsChild
GetActiveWindow
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
MessageBoxA
GetDlgItemTextA
kernel32
HeapAlloc
GetProcessHeap
GetModuleHandleA
CloseHandle
GetTickCount
GetVersionExA
ExitProcess
comctl32
ord17
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 230B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ