Static task
static1
Behavioral task
behavioral1
Sample
aba9da0cc5d762a257877523369e78d0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
aba9da0cc5d762a257877523369e78d0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
aba9da0cc5d762a257877523369e78d0_NeikiAnalytics
-
Size
548KB
-
MD5
aba9da0cc5d762a257877523369e78d0
-
SHA1
35ec3e5c4bb6b403220530df2cf485c61a0378b3
-
SHA256
54659582cac48bf69b71cc05de2e65ba91734c2b9bfd5fd85a552f63a6ac009f
-
SHA512
7ff201b833cd349589c85527a42ef502ce46af5b2bfbaf783fb1ff46df1344d1a6fcc3d81e341e19f6c9918ad64a0e3ad682abcba6aa1626fed0ae176beaa3ce
-
SSDEEP
6144:9OrHBXYgaug9BKEPaAFNI3reWNiw+FEcIxcw1aezkrYCcQc1B3HJEcAZj5xL8jiT:9OV26EVIji5+xcwLF/JEcAZjDL8jMf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aba9da0cc5d762a257877523369e78d0_NeikiAnalytics
Files
-
aba9da0cc5d762a257877523369e78d0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
b77fd17e1d72da1d0092df8fb40bcd11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
imm32
ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext
ImmSetCompositionFontA
ImmSetCompositionWindow
ImmNotifyIME
kernel32
GetACP
IsValidCodePage
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
ExitProcess
GetStartupInfoA
GetProcessHeap
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
VirtualAlloc
HeapReAlloc
HeapFree
HeapAlloc
SetErrorMode
GetCurrentDirectoryA
LocalFileTimeToFileTime
FileTimeToLocalFileTime
CreateFileA
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
GetStdHandle
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetProfileIntA
GlobalReAlloc
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryExA
InterlockedDecrement
GetModuleFileNameW
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
CopyFileA
FormatMessageA
LocalFree
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GetCurrentProcessId
GlobalGetAtomNameA
GlobalAddAtomA
SetLastError
LoadLibraryA
GetProcAddress
lstrcmpA
GetTickCount
GetLocaleInfoA
GetVersionExA
GetModuleHandleA
GetModuleFileNameA
MulDiv
IsDBCSLeadByte
lstrcpyA
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
SizeofResource
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
HeapCreate
HeapDestroy
VirtualFree
HeapSize
TlsSetValue
GetSystemTimeAsFileTime
user32
UnregisterClassA
DestroyIcon
PostThreadMessageA
CopyAcceleratorTableA
CreateMenu
GetTabbedTextExtentA
LockWindowUpdate
SetWindowRgn
DrawIcon
FindWindowA
IsZoomed
ShowOwnedPopups
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
IsClipboardFormatAvailable
CreateDialogIndirectParamA
EndDialog
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxA
RegisterClassA
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
RegisterWindowMessageA
GetClassNameA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
WinHelpA
SetFocus
GetWindowThreadProcessId
IsWindowEnabled
GetDlgItem
GetDlgCtrlID
LoadIconA
PeekMessageA
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
IsIconic
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
SetRectEmpty
GetLastActivePopup
SetMenu
GetDesktopWindow
GetWindow
ShowWindow
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetWindowLongA
SetWindowLongA
IsWindow
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
GetActiveWindow
DrawMenuBar
CreateWindowExA
GetMenuItemCount
GetMenuItemID
DefMDIChildProcA
GetMenu
DefFrameProcA
GetKeyState
GetParent
GetNextDlgTabItem
GetFocus
GetSystemMetrics
RegisterClipboardFormatA
GetCursorPos
GetAsyncKeyState
ScreenToClient
LoadMenuA
GetSubMenu
UpdateWindow
MapDialogRect
LoadImageA
SetCursor
ReleaseCapture
LoadCursorA
SetCapture
GetCapture
KillTimer
SetTimer
InvalidateRect
GetClientRect
PostMessageA
DestroyCaret
GetSysColorBrush
GetDCEx
GetSystemMenu
DeleteMenu
WindowFromPoint
SetParent
DestroyCursor
GetMenuItemInfoA
GetScrollPos
GetWindowRect
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
ReleaseDC
GetDC
ClientToScreen
InvertRect
IntersectRect
EqualRect
OffsetRect
SetRect
PtInRect
IsRectEmpty
GetSysColor
SendMessageA
EnableWindow
DrawFocusRect
FrameRect
FillRect
InflateRect
CopyRect
CharUpperA
GetClassInfoExA
gdi32
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
DeleteDC
CreatePatternBrush
SetRectRgn
CreateFontA
CreateEllipticRgn
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
GetBkColor
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceA
GetWindowOrgEx
EnumFontFamiliesExA
PatBlt
GetKerningPairsA
GetOutlineTextMetricsA
GetCharWidthA
GetTextMetricsA
SetPixelV
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
CreateBitmap
SetBkColor
SetTextColor
SetStretchBltMode
StretchDIBits
CreatePalette
GetTextExtentPoint32A
BitBlt
DPtoLP
SetBrushOrgEx
CreateCompatibleBitmap
CreatePen
UnrealizeObject
DeleteObject
GetDIBColorTable
CreateCompatibleDC
GetStockObject
SelectObject
GetTextCharset
GetDeviceCaps
RoundRect
Rectangle
Polygon
Ellipse
LPtoDP
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgnIndirect
CreateRectRgnIndirect
GetObjectA
CreateFontIndirectA
CreateBrushIndirect
CreateSolidBrush
CreatePenIndirect
GetClipBox
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA
advapi32
RegDeleteValueA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
RegSetValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
shell32
DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA
DragAcceptFiles
shlwapi
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CreateStreamOnHGlobal
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoRegisterMessageFilter
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoRevokeClassObject
oleaut32
VariantClear
SysAllocStringLen
VariantInit
VariantChangeType
Sections
.text Size: 388KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ