Static task
static1
Behavioral task
behavioral1
Sample
7f78a5cd1060a26674cae62979d821c0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7f78a5cd1060a26674cae62979d821c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
7f78a5cd1060a26674cae62979d821c0_NeikiAnalytics
-
Size
29KB
-
MD5
7f78a5cd1060a26674cae62979d821c0
-
SHA1
6d23eaf69d94626b6f09e05133d71f3658878757
-
SHA256
ec1397f00a01c4c1bdc5f92505f178e1352e1ae0c877174a9530e0accb9064db
-
SHA512
ada04e5ea7d4f79d862c2430bc91767999833fb1064cfd5b7c083dae4af8fee200b01c52cf2791d3dd2e8376e6a90f9de25a812d71902c4fd186e0f3731e91dc
-
SSDEEP
768:qQFGZ2RMT3XdnrmXdiaq6IL0oMAkYYFzlkOzj8JLtu5wkGk9U:qQFGZ3TZSTkOzPDGkK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f78a5cd1060a26674cae62979d821c0_NeikiAnalytics
Files
-
7f78a5cd1060a26674cae62979d821c0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
e547ce7593669d78b55bb099a0e2fc19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
msacm32
acmStreamOpen
acmStreamSize
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
GetLengthSid
RegDeleteValueA
RegCreateKeyExA
kernel32
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetCPInfo
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ