Static task
static1
Behavioral task
behavioral1
Sample
b907583d7336791c958ac819d0d6c8b0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b907583d7336791c958ac819d0d6c8b0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
b907583d7336791c958ac819d0d6c8b0_NeikiAnalytics
-
Size
42KB
-
MD5
b907583d7336791c958ac819d0d6c8b0
-
SHA1
4e89331680af2c67df298c792d4f2799df93eaf6
-
SHA256
064a7f5f67234acb5310e5d2bb27010a35c7581a957a59e152bd66cacba07acb
-
SHA512
0fc82b172bcb584600628a7620a6cd8583661b1c93fe0c044428204e55512e3504c0b7731b1b8242d61e56ae1174511dd3854e47098bd7d4455e541c70448e6e
-
SSDEEP
384:m77wRGyCMPTBHFOow/nf4SxX2ntA5Z7p1MJXOs8MeA:ywPrBl9snglntu1MJXOsj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b907583d7336791c958ac819d0d6c8b0_NeikiAnalytics
Files
-
b907583d7336791c958ac819d0d6c8b0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
ec37f725b2689e4932373eab7c062bfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
dbghelp
DbgHelpCreateUserDump
glu32
gluBeginCurve
gluBeginPolygon
gluBeginSurface
gluBeginTrim
gluBuild1DMipmaps
gluBuild2DMipmaps
gluCylinder
gluDeleteNurbsRenderer
gluDeleteQuadric
gluDeleteTess
gluDisk
gluEndCurve
gluEndPolygon
gluEndSurface
gluEndTrim
gluErrorString
gluErrorUnicodeStringEXT
gluGetNurbsProperty
gluGetString
gluGetTessProperty
gluLoadSamplingMatrices
gluLookAt
gluNewNurbsRenderer
gluNewQuadric
gluNewTess
gluNextContour
gluNurbsCallback
gluNurbsCurve
gluNurbsProperty
gluNurbsSurface
gluOrtho2D
kernel32
MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalFree
SetConsoleTitleW
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA
adsldpc
ADSIGetColumn
ADSIFreeColumn
ADSIModifyRdn
ADSIFreeColumn
ADSIGetColumn
ADSIGetFirstRow
ADSIGetNextColumnName
ADSIGetNextRow
ADSIGetObjectAttributes
ADSIGetPreviousRow
ADSIModifyRdn
msrating
RatingCustomInit
mtxclu
MtxCluIsClusterPresent
samlib
SamAddMemberToAlias
Sections
.text Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uinC Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE