Static task
static1
Behavioral task
behavioral1
Sample
fd8abcf7b4aa0352c8ac1d6e54d1a450_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
fd8abcf7b4aa0352c8ac1d6e54d1a450_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
fd8abcf7b4aa0352c8ac1d6e54d1a450_NeikiAnalytics
-
Size
1.6MB
-
MD5
fd8abcf7b4aa0352c8ac1d6e54d1a450
-
SHA1
12906ef30567ba2c2e9f676425390c6b0490bd30
-
SHA256
6d9abdacfc1a0d0836e9154e53979c2821b47fd19bae5985d8c9d77e7ce0068d
-
SHA512
a5ebc0bbde7c5397a79b6ffe43adf0bd56368b74a0457605d8ca2aaa8dc95006cb4feff2c425bae0533476b6480a52aaa6d6d6084c2cca9c6ba64385b9b54bef
-
SSDEEP
12288:14gWH8cVDHVgsvKyu2faUdugKyu2fQUdur9BIe7kfL7:egWH7D1gsO2fvuJ2f9uKL7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd8abcf7b4aa0352c8ac1d6e54d1a450_NeikiAnalytics
Files
-
fd8abcf7b4aa0352c8ac1d6e54d1a450_NeikiAnalytics.exe windows:5 windows x64 arch:x64
e9d140d61d88c5f85d36b0f500756c7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetProcAddress
LoadLibraryA
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
HeapReAlloc
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetLastError
HeapFree
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
Sleep
HeapSize
GetModuleHandleW
ExitProcess
RtlUnwindEx
RaiseException
RtlPcToFileHeader
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
user32
LoadCursorA
UpdateWindow
DispatchMessageA
EndPaint
GetMessageA
RegisterClassExA
PostQuitMessage
LoadStringA
BeginPaint
TranslateMessage
CreateWindowExA
TranslateAcceleratorA
DefWindowProcA
ShowWindow
wininet
InternetOpenUrlA
InternetReadFile
HttpQueryInfoA
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ