Static task
static1
Behavioral task
behavioral1
Sample
3f28e3b2daf5476bf63ce71e759d0610_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f28e3b2daf5476bf63ce71e759d0610_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
3f28e3b2daf5476bf63ce71e759d0610_NeikiAnalytics
-
Size
276KB
-
MD5
3f28e3b2daf5476bf63ce71e759d0610
-
SHA1
824b185f944ce0c016e8f214e6c655c784ab4374
-
SHA256
15425c810a809ad94be51b5e37cb0dc6533a4956ff1d3a02ac3e81e40f477d8a
-
SHA512
f0b7f887c048c6add985a4e92da02821ece06e09ae39e5eebe9f1d04b0984aa106f49a7766a138dc697bd5b9ec6fba152bebdccb4b62862b0605200adc98ca35
-
SSDEEP
3072:LPJa9UjrL5vSfmKpsx7HGTWeswMqOAESE6asU9Jr/Dln0UzPof0SeCcPMll:jAUTxSfm8sxrVwM8I6I9hrl/zAcSebPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f28e3b2daf5476bf63ce71e759d0610_NeikiAnalytics
Files
-
3f28e3b2daf5476bf63ce71e759d0610_NeikiAnalytics.exe windows:5 windows x86 arch:x86
884716fa51c64ed132bb26d19ccc9959
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AreFileApisANSI
CloseHandle
CreateEventA
CreateEventW
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
VirtualAlloc
GetUserDefaultLCID
GetVersionExA
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
QueryPerformanceCounter
SetEnvironmentVariableW
SetEvent
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
TerminateThread
UnhandledExceptionFilter
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
lstrcpynA
lstrlenA
GetTimeFormatW
ReadFile
user32
LoadIconA
LoadCursorW
DialogBoxParamW
EnableWindow
EndDialog
GetDesktopWindow
GetDlgItem
IsDlgButtonChecked
LoadStringW
MessageBoxW
SetFocus
LoadIconW
LoadCursorA
advapi32
RegOpenKeyExW
msvcrt
_cexit
_controlfp
exit
_acmdln
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ