Static task
static1
Behavioral task
behavioral1
Sample
3e9b8d4f5b23d5589501c50430bba710_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e9b8d4f5b23d5589501c50430bba710_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3e9b8d4f5b23d5589501c50430bba710_NeikiAnalytics
-
Size
1.6MB
-
MD5
3e9b8d4f5b23d5589501c50430bba710
-
SHA1
d989340f1cdfe0d4bbe28da9930b750ea7630f19
-
SHA256
3389b84b4eba9a2084f4271431bfde9a5bbed62da369f06ce448035401badef6
-
SHA512
ebd6b46435d8d826a4245def68afe58b7246e46e78746e0aee3d229fd6fc3349d4f3a3a4cd4b57efe358774b23634c4e26321b5458ce46fb62c2ae0076c7529f
-
SSDEEP
24576:69iUdlB2yGAjNcyN/8kVITKOmerRSQ8snJgBqA/EI:6ICVjNc+9IVSwJML
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9b8d4f5b23d5589501c50430bba710_NeikiAnalytics
Files
-
3e9b8d4f5b23d5589501c50430bba710_NeikiAnalytics.exe windows:4 windows x86 arch:x86
fb245ff6981502532f8e18c9d2373d28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
dsound
ord11
d3d8
Direct3DCreate8
kernel32
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
GetLogicalDrives
GetVolumeInformationA
GetDriveTypeA
CreateMutexA
GetModuleHandleA
WideCharToMultiByte
CreateFileMappingA
CreateFileW
GetVersionExA
UnmapViewOfFile
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
CreateThread
OutputDebugStringA
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
CreateFileA
CloseHandle
MulDiv
lstrcpyA
lstrcatA
Sleep
TerminateThread
MapViewOfFile
LoadLibraryA
GetFileSize
GetLastError
GetStringTypeA
HeapFree
RaiseException
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
IsBadWritePtr
GetUserDefaultLCID
GetStringTypeW
HeapAlloc
GetTimeZoneInformation
HeapCreate
HeapDestroy
VirtualFree
GetModuleFileNameA
SetUnhandledExceptionFilter
GetEnvironmentVariableA
SetFilePointer
WriteFile
FlushFileBuffers
TlsGetValue
GetProcAddress
TlsAlloc
SetLastError
GetCurrentThreadId
HeapSize
TlsSetValue
CompareStringA
GetCPInfo
CompareStringW
LCMapStringA
ReadFile
SetStdHandle
IsBadCodePtr
IsBadReadPtr
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
RtlUnwind
VirtualAlloc
GetCommandLineA
LCMapStringW
GetSystemTime
GetLocalTime
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
user32
SetForegroundWindow
PostQuitMessage
MessageBoxA
GetWindowLongA
GetClientRect
GetWindowRect
SetRect
CreateWindowExA
AdjustWindowRect
LoadIconA
RegisterClassExA
LoadCursorA
DefWindowProcA
DestroyWindow
SetCursor
SetWindowLongA
SetWindowPos
SystemParametersInfoA
DispatchMessageA
SendMessageA
GetKeyState
LoadStringA
wsprintfA
LoadAcceleratorsA
PeekMessageA
GetForegroundWindow
IsIconic
CloseWindow
GetMessageA
gdi32
DeleteObject
DeleteDC
GetTextExtentPoint32A
SetTextAlign
SetBkColor
SetTextColor
SelectObject
CreateFontA
GetDeviceCaps
SetMapMode
CreateDIBSection
CreateCompatibleDC
ExtTextOutA
GetStockObject
advapi32
RegQueryValueExA
RegOpenKeyExA
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
Sections
.text Size: 768KB - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 660KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE