Static task
static1
Behavioral task
behavioral1
Sample
8d78ed18bc25a0802adb6b127f847d10_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8d78ed18bc25a0802adb6b127f847d10_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8d78ed18bc25a0802adb6b127f847d10_NeikiAnalytics
-
Size
40KB
-
MD5
8d78ed18bc25a0802adb6b127f847d10
-
SHA1
7eaa6dea24aea96fd462c5cd9440c364afa804e1
-
SHA256
a159c576f97a79454522d0fe1c9267a6d898f0f821f6a5479a1be4466ed0c2c3
-
SHA512
c4426cf09fe9029185ec843bcaf50b8535b876ffef55d58f493d29eba044a09493f688c64e8d402e93b007842ba10a3da5f2aca34fadd726da2da039a4b83385
-
SSDEEP
768:s8nTEIeqK7dM0UVD7UmmsCvkIGo5AlHNROB5UfXqb1:s8T/eqKq3VD1msCvxslHeB5U61
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d78ed18bc25a0802adb6b127f847d10_NeikiAnalytics
Files
-
8d78ed18bc25a0802adb6b127f847d10_NeikiAnalytics.exe windows:5 windows x86 arch:x86
23b8169151afba4bcefb4e793f9b02bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strchr
_lseek
_chsize
tolower
getenv
_filelength
_stricmp
gets
strncmp
exit
_c_exit
_exit
_XcptFilter
_getch
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_chmod
isdigit
atoi
strspn
strpbrk
_eof
_read
_write
isalpha
_getdrive
toupper
strncpy
_mkdir
_errno
__doserrno
sprintf
_open
printf
_close
_unlink
_stat
_tempnam
_strdup
malloc
_cexit
free
kernel32
DosDateTimeToFileTime
GetCurrentProcessId
GetDriveTypeA
GetFileAttributesA
CloseHandle
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
Sleep
GetLastError
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
CreateFileA
user32
DispatchMessageA
PeekMessageA
SendDlgItemMessageA
EnableMenuItem
GetSystemMenu
CreateDialogParamA
CharNextExA
DestroyWindow
comctl32
ord17
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ