Static task
static1
Behavioral task
behavioral1
Sample
e45c7d97fcffc601049493180ad7fa40_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e45c7d97fcffc601049493180ad7fa40_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
e45c7d97fcffc601049493180ad7fa40_NeikiAnalytics
-
Size
31KB
-
MD5
e45c7d97fcffc601049493180ad7fa40
-
SHA1
9c2f10fc9d51623e280d39c544192ed23e7403ae
-
SHA256
4bd490105344589f313097c205808d03634acbfdf8c6a0dfaa65a396e33a746f
-
SHA512
be841d8dc02f2ff5498de08f81825c3c048d69dc5732fdd9a9ea4bb852519d81038d301b71145a84909871b1116782b54c77f9ef849d0eddeb3b319a73ffa3e8
-
SSDEEP
768:qQFGZ2RMT3XdnrmXdiaq6IL0oMAkYYFzlkOzj8JLtuF0UI+YSwF:qQFGZ3TZSTkOzIUIh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e45c7d97fcffc601049493180ad7fa40_NeikiAnalytics
Files
-
e45c7d97fcffc601049493180ad7fa40_NeikiAnalytics.exe windows:5 windows x86 arch:x86
e547ce7593669d78b55bb099a0e2fc19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
msacm32
acmStreamOpen
acmStreamSize
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
GetLengthSid
RegDeleteValueA
RegCreateKeyExA
kernel32
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetCPInfo
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ