Static task
static1
Behavioral task
behavioral1
Sample
29c642c475c24eb1a14a0c2f13cacea0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
29c642c475c24eb1a14a0c2f13cacea0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
29c642c475c24eb1a14a0c2f13cacea0_NeikiAnalytics
-
Size
297KB
-
MD5
29c642c475c24eb1a14a0c2f13cacea0
-
SHA1
c9d8e285b0f222ec26a6626d0cd9bc4438964ef5
-
SHA256
d2867887364803bff5d9452b59c59f704bd86bc7ff3b729a649514ed93db3af8
-
SHA512
733d5b94406944ef393e4c990be05a74b77c16d788a25301dbe55be4c9f32f5d23e5cd3db5333f9806732735f5cbd1fae9e30d44143652a8628c0436518681d0
-
SSDEEP
3072:ZQQATkXmP8S8rw6zqPmUj1Z8gkiuL7bCxPe++eNn1e0Kqns78ZZ6zvuug82xhMwl:6podhCx2nrb8ZMv1gt+pve+sZoM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29c642c475c24eb1a14a0c2f13cacea0_NeikiAnalytics
Files
-
29c642c475c24eb1a14a0c2f13cacea0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
9fbaf707ed18c350320d610965895c8d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
lstrlenA
EscapeCommFunction
GetPrivateProfileStringW
LoadLibraryW
GetConsoleMode
GetTapePosition
lstrlenW
RaiseException
GetLastError
VirtualAlloc
SetFileAttributesA
FindFirstVolumeMountPointA
EraseTape
CreateFileW
CloseHandle
WriteConsoleW
FlushFileBuffers
GetConsoleCP
OutputDebugStringW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapFree
GetCommandLineW
RtlUnwind
HeapAlloc
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
ExitProcess
GetModuleHandleExW
HeapSize
IsDebuggerPresent
ReadFile
ReadConsoleW
GetCurrentThreadId
GetStdHandle
GetFileType
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetACP
IsValidCodePage
GetOEMCP
HeapReAlloc
LoadLibraryExW
SetStdHandle
SetFilePointerEx
user32
MapVirtualKeyA
ole32
CreateStreamOnHGlobal
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.htext Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE