Static task
static1
Behavioral task
behavioral1
Sample
3a257f17e4c2858bece1b29c05f021b0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3a257f17e4c2858bece1b29c05f021b0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
3a257f17e4c2858bece1b29c05f021b0_NeikiAnalytics
-
Size
1.2MB
-
MD5
3a257f17e4c2858bece1b29c05f021b0
-
SHA1
19e4f04f23bb3b3ea6b4bb846489757c5243c3a2
-
SHA256
4db31cd27b9b8c54434d32e42ddcbdf3d756ff414a66667e5a0eb7609923beda
-
SHA512
9ba23339b46a697792f574a9ccbc528d5e143e1954cd057bb6e54fdd40ffd623eb05e55a4b72cc5250084bea5cb6fd580c216c1dbac7cf473ce7e59259046809
-
SSDEEP
24576:NJggRF6kMXWg31+984kzsPN8++eDjxCdeD9m:NJgg4XpF+9L2iN8+zjII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a257f17e4c2858bece1b29c05f021b0_NeikiAnalytics
Files
-
3a257f17e4c2858bece1b29c05f021b0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
7d99d295f47c655d4e2b9985873e8da7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadProcessMemory
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
EnumDisplayDevicesW
gdi32
CreateDCW
advapi32
RegCloseKey
shell32
ShellExecuteW
psapi
GetModuleBaseNameW
winhttp
WinHttpSendRequest
ws2_32
send
urlmon
URLOpenBlockingStreamA
Sections
.text Size: - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dksmksld Size: - Virtual size: 778KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
dksmksld Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dksmksld Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ