Static task
static1
Behavioral task
behavioral1
Sample
0ec4c3ca926be15e892714cd50c3b6e81ee25005651c6bd89bfc0bc244972128_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ec4c3ca926be15e892714cd50c3b6e81ee25005651c6bd89bfc0bc244972128_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
0ec4c3ca926be15e892714cd50c3b6e81ee25005651c6bd89bfc0bc244972128_NeikiAnalytics.exe
-
Size
274KB
-
MD5
3a02a5bd8508f27a4873b53dd6762bb0
-
SHA1
80c4ce91c2d79aa14e5a76abb904cc398bbfb3e0
-
SHA256
0ec4c3ca926be15e892714cd50c3b6e81ee25005651c6bd89bfc0bc244972128
-
SHA512
cf53b8e5b9d8f309be433e5ac71b6eec2f770b6cfff0ceebc81c586057cc5b9b7b348c5d64218428c331b975b008879491129f9bff7884b2613a394e8b8472e6
-
SSDEEP
3072:tgcNQ17HVFzvN8s4oWcFmo7MMg5Z3E3ZwX/44YIM+C/gdzkeRkn0wa:tgce17HrvJWcF5vg5Z0KQIvCgkeua
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec4c3ca926be15e892714cd50c3b6e81ee25005651c6bd89bfc0bc244972128_NeikiAnalytics.exe
Files
-
0ec4c3ca926be15e892714cd50c3b6e81ee25005651c6bd89bfc0bc244972128_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
fdd7c669247f52ed81733ae7e0d53b63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetACP
GetVersion
SetHandleCount
GetFileInformationByHandle
CloseHandle
CreateFileA
ExitProcess
HeapAlloc
HeapFree
GetLastError
GetFileType
WriteFile
GetStdHandle
GetModuleFileNameA
SetFilePointer
SetStdHandle
DeleteFileA
GetFileAttributesA
HeapReAlloc
SetConsoleCtrlHandler
ReadFile
SetEndOfFile
GetProcAddress
LoadLibraryA
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetOEMCP
GetStartupInfoA
HeapCreate
HeapDestroy
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
GetCurrentProcessId
FlushFileBuffers
Sections
.text Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 775B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ