Static task
static1
Behavioral task
behavioral1
Sample
736cce86b16eca84953ffd5712a10330_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
736cce86b16eca84953ffd5712a10330_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
736cce86b16eca84953ffd5712a10330_NeikiAnalytics
-
Size
32KB
-
MD5
736cce86b16eca84953ffd5712a10330
-
SHA1
aaf3d7b4fef37dd3f8afb4933775122897e83ffb
-
SHA256
0cd7c756abdca96bc09f8fceccc4f3dd9d309272b5beb60e68f722c656fc455f
-
SHA512
4bc18e2b2ec131505ad9b2b6b4383881e02fd6f17cb29d2d97ce462c8bfe46a5b530488834407f41e6252e4f6f1e51ffd4f476276e01a1e9b42afa5e8985dbe8
-
SSDEEP
384:ZZrwPjmJvBajlsR7zSmlWTOuQyyLJWMp7YYXy6oZ3E4W:ZBTIluzQIyOW4ji6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 736cce86b16eca84953ffd5712a10330_NeikiAnalytics
Files
-
736cce86b16eca84953ffd5712a10330_NeikiAnalytics.exe windows:4 windows x86 arch:x86
dfc4c18925a483995bf58e7aca54d8e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
LoadStringA
MessageBoxA
winspool.drv
AddMonitorA
EnumMonitorsA
advapi32
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
kernel32
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LoadLibraryA
MultiByteToWideChar
ExitProcess
LocalFree
LocalHandle
lstrcatA
FormatMessageA
GetLastError
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetWindowsDirectoryA
SetFileAttributesA
CopyFileA
lstrcpyA
GetModuleFileNameA
GetSystemDirectoryA
lstrcmpA
lstrlenA
GetVersion
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE