Static task
static1
Behavioral task
behavioral1
Sample
b7424b7a62588f43d88d8d856c4e4910_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7424b7a62588f43d88d8d856c4e4910_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b7424b7a62588f43d88d8d856c4e4910_NeikiAnalytics
-
Size
232KB
-
MD5
b7424b7a62588f43d88d8d856c4e4910
-
SHA1
2e2f054de2547a2f7bb22d3c5b85e8396f4dfd6c
-
SHA256
bfba1e89adb4a744894f2127aceb4da9492b479607975e36f6bfb98b095198cc
-
SHA512
7a3e3eaf4ace9d9445eae8eb49f0b6ba209f78166f64cf1004b77e5eaa7abc93d5010b5d5f9aed57b0fea98395008a7d0be27d6b26fab87dbd9f639a85bc36ca
-
SSDEEP
6144:AZUHvGayg7xhzS0QCmQKeyG8tr9PJdxFZtBn9IWW8m6n6ykbfcq1:AZUHvGaZxhzS0QCmQKeyG8tr9PJdxFZw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7424b7a62588f43d88d8d856c4e4910_NeikiAnalytics
Files
-
b7424b7a62588f43d88d8d856c4e4910_NeikiAnalytics.exe windows:4 windows x86 arch:x86
8467abed8c664e4672308eab32a000ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
timeGetTime
mciSendStringA
sndPlaySoundA
kernel32
GlobalLock
FlushFileBuffers
CreateFileA
SetEndOfFile
GetTempPathA
GlobalUnlock
GetVersion
GetProcAddress
GetFullPathNameA
SetCurrentDirectoryA
FindFirstFileA
FindClose
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
FreeLibrary
FindAtomA
AddAtomA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetPrivateProfileStringA
GetWindowsDirectoryA
GetStartupInfoA
GetModuleFileNameA
CreateProcessA
SetStdHandle
GlobalAlloc
GetACP
SetUnhandledExceptionFilter
IsBadWritePtr
IsBadCodePtr
SetFilePointer
ReadFile
VirtualAlloc
LCMapStringW
LCMapStringA
CloseHandle
RaiseException
HeapSize
MultiByteToWideChar
HeapCreate
HeapDestroy
VirtualFree
SetHandleCount
GetEnvironmentStringsW
GetFileType
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
UnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
DeleteFileA
WriteFile
GetDriveTypeA
GetCurrentDirectoryA
GetLastError
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineA
GetModuleHandleA
GetCPInfo
IsBadReadPtr
GetCurrentProcess
TerminateProcess
GetStringTypeW
GetOEMCP
GetStringTypeA
RtlUnwind
ExitProcess
user32
MapWindowPoints
EnableWindow
GetFocus
IsWindow
GetDlgCtrlID
CheckDlgButton
SetDlgItemTextA
SetDlgItemInt
GetPropA
LoadStringA
GetSysColor
GetClipboardData
RegisterClipboardFormatA
OpenClipboard
SetClipboardData
EmptyClipboard
GetParent
IsChild
RedrawWindow
GetDlgItem
GetDlgItemTextA
SetWindowPlacement
CloseClipboard
IsWindowVisible
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
IsIconic
GetMessageA
DestroyWindow
ChildWindowFromPointEx
GetActiveWindow
GetMessageTime
GetAsyncKeyState
GetKeyState
GetCapture
ReleaseCapture
LoadCursorA
SetCapture
SetCursor
SetCursorPos
ClientToScreen
ScreenToClient
ReleaseDC
SendMessageA
MessageBoxA
FindWindowA
GetDC
CallWindowProcA
GetMenu
TranslateAcceleratorA
UpdateWindow
GetScrollRange
SetScrollPos
GetCursorPos
GetTopWindow
EndDialog
SetWindowLongA
SetFocus
SetPropA
PostQuitMessage
GetWindowRect
MoveWindow
EndPaint
DefWindowProcA
BeginPaint
InvalidateRect
GetWindowLongA
PostMessageA
AdjustWindowRect
DestroyMenu
GetSystemMetrics
LoadMenuA
CreateWindowExA
LoadIconA
RegisterClassA
GetLastActivePopup
LoadAcceleratorsA
SetScrollRange
SetForegroundWindow
BringWindowToTop
ShowWindow
GetClientRect
GetWindow
wsprintfA
GetWindowPlacement
GetWindowTextA
gdi32
GetDeviceCaps
GetStockObject
DeleteDC
SelectObject
GetSystemPaletteEntries
SelectPalette
UpdateColors
RealizePalette
BitBlt
CreatePalette
GetPaletteEntries
SetTextColor
SetBkColor
CreateSolidBrush
CreateCompatibleDC
CreateDIBSection
SetDIBColorTable
GetDIBColorTable
StretchBlt
DeleteObject
comdlg32
ChooseColorA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ