Static task
static1
Behavioral task
behavioral1
Sample
68fcf02cc93039127acc4b1a4530007b2ed8778e58e70b701f30332d6f620853_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
68fcf02cc93039127acc4b1a4530007b2ed8778e58e70b701f30332d6f620853_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
68fcf02cc93039127acc4b1a4530007b2ed8778e58e70b701f30332d6f620853_NeikiAnalytics.exe
-
Size
217KB
-
MD5
b388da7e8a17025ebde4e484838b9920
-
SHA1
9a2181993cff471239aff2232f404f74f6a888b3
-
SHA256
68fcf02cc93039127acc4b1a4530007b2ed8778e58e70b701f30332d6f620853
-
SHA512
8f2595ec4e08612e5d45f57819cfd86bfbcd5ed18e529b6ccbc58efbe5d848977b4593b967d7de474fe9cf461eb3d20f7b80725b510d97868a632d021568b560
-
SSDEEP
6144:HdUQ0N9Tx9l3Eg+b/IEjXMu55of50o773GhDvz:96Trl0g+bIEpXov3GNr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68fcf02cc93039127acc4b1a4530007b2ed8778e58e70b701f30332d6f620853_NeikiAnalytics.exe
Files
-
68fcf02cc93039127acc4b1a4530007b2ed8778e58e70b701f30332d6f620853_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
58186114fc2f437eaf5104a754d869a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetACP
VirtualAlloc
GetCurrentThread
GetOEMCP
user32
LoadCursorA
LoadCursorW
IsWindow
GetParent
GetDlgItem
EndDialog
MessageBoxW
PostMessageW
SetWindowLongW
SystemParametersInfoW
GetDC
ReleaseDC
SendMessageW
EnumWindows
GetSystemMetrics
SetForegroundWindow
advapi32
RegOpenKeyA
Sections
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg22 Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ