Static task
static1
Behavioral task
behavioral1
Sample
900fb7df072aeffac542ca61b8bf9dc9ae0904851f32160ac30837ef39a46d5d_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
900fb7df072aeffac542ca61b8bf9dc9ae0904851f32160ac30837ef39a46d5d_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
900fb7df072aeffac542ca61b8bf9dc9ae0904851f32160ac30837ef39a46d5d_NeikiAnalytics.exe
-
Size
951KB
-
MD5
e8fb7019bbf480b47563435a01bf2770
-
SHA1
63f54ca5327d3745ef63e16af89bc806cbd39e9a
-
SHA256
900fb7df072aeffac542ca61b8bf9dc9ae0904851f32160ac30837ef39a46d5d
-
SHA512
de12fda43226982739f468b84b5b21ce7cbb7fe1f3fce320fe50e81e90d250281a189708aa1d3a6a800fa52389fa731507595e786fb403c6ae275e1560797c48
-
SSDEEP
24576:6VL/FEHkBUzngFLOIKTu5gbIo+5NTxd/Q:ikkB/V8u595NTxdI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 900fb7df072aeffac542ca61b8bf9dc9ae0904851f32160ac30837ef39a46d5d_NeikiAnalytics.exe
Files
-
900fb7df072aeffac542ca61b8bf9dc9ae0904851f32160ac30837ef39a46d5d_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 100KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wtyorovn Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
whshcwwo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE