Static task
static1
Behavioral task
behavioral1
Sample
9e64683ff20bdd8eb7db3f4bf42ad55d6f645dd49fdd1e78eba3ce39877bc1f9_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9e64683ff20bdd8eb7db3f4bf42ad55d6f645dd49fdd1e78eba3ce39877bc1f9_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
9e64683ff20bdd8eb7db3f4bf42ad55d6f645dd49fdd1e78eba3ce39877bc1f9_NeikiAnalytics.exe
-
Size
46KB
-
MD5
3e3ff1fc2d7ec69b8c952ba9896874c0
-
SHA1
98ea09d9edabac7dd8650cf08c5f050b77de858b
-
SHA256
9e64683ff20bdd8eb7db3f4bf42ad55d6f645dd49fdd1e78eba3ce39877bc1f9
-
SHA512
d5ce4144774f902585cd62d8e92c81945d38667bbdabb979a373f0b856689b16696ef9bd902c56e9c89b2d5ecbdab7c60629126af73fbc5a0bfd8a2ac6a05651
-
SSDEEP
768:PXuk2ItF86gj/2S0mppSzKnladKNrlbJgFngWqQALtm7zkY:PwVixkbnlOKNhlOnmLEL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e64683ff20bdd8eb7db3f4bf42ad55d6f645dd49fdd1e78eba3ce39877bc1f9_NeikiAnalytics.exe
Files
-
9e64683ff20bdd8eb7db3f4bf42ad55d6f645dd49fdd1e78eba3ce39877bc1f9_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
bef15b6d6e736ad99d551c5b799de830
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
SendMessageA
SetFocus
GetMessageW
DispatchMessageA
EndDialog
GetDlgItem
IsChild
GetActiveWindow
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
MessageBoxA
GetDlgItemTextA
kernel32
HeapAlloc
GetProcessHeap
GetModuleHandleA
CloseHandle
GetTickCount
HeapFree
GetSystemTime
GetVersionExA
ExitProcess
comctl32
ord17
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ