Static task
static1
Behavioral task
behavioral1
Sample
667db3c819a6d610557d998700d5939049cb949674e6e25186908060f4a58018_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
667db3c819a6d610557d998700d5939049cb949674e6e25186908060f4a58018_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
667db3c819a6d610557d998700d5939049cb949674e6e25186908060f4a58018_NeikiAnalytics.exe
-
Size
58KB
-
MD5
b5e067187aac1bd4150b756db1e73a70
-
SHA1
13891459c992a4d4e8a6f95822411e62c7a4e372
-
SHA256
667db3c819a6d610557d998700d5939049cb949674e6e25186908060f4a58018
-
SHA512
c0801a0f7b28071cd2a262645969d29afc76cdfbe27091dae0e38e99d7309fba940407704471bf45c6a3b2323f9fd3cd381ba7de6f802f09608fa03d87fad00c
-
SSDEEP
1536:AkGjXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8nsTQtpsWME0YL7A:mjXRrs9sINeZEtejlIkoLN127BFVn2pT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 667db3c819a6d610557d998700d5939049cb949674e6e25186908060f4a58018_NeikiAnalytics.exe
Files
-
667db3c819a6d610557d998700d5939049cb949674e6e25186908060f4a58018_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
0472c674d7267dab79104d29a2a3058b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA
kernel32
TlsFree
TlsSetValue
TlsGetValue
CreateFileA
TlsAlloc
gdi32
LineTo
MoveToEx
comctl32
ord17
shell32
DragQueryPoint
DragFinish
DragQueryFileA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ