Static task
static1
Behavioral task
behavioral1
Sample
500f49e9b0e965d35d437cfa1eb94bf0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
500f49e9b0e965d35d437cfa1eb94bf0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
500f49e9b0e965d35d437cfa1eb94bf0_NeikiAnalytics
-
Size
568KB
-
MD5
500f49e9b0e965d35d437cfa1eb94bf0
-
SHA1
fd50de32381b34ed6fa600c87c7d1b4f15994f13
-
SHA256
5a869a81c12cce50b049a3537ab239f991260e0e3d22812f8f690505dfe4e512
-
SHA512
912a3d34580395627b0d0306501affebed800cffaeb2ab05280a87044d7475be9946c6cae86162af4dfc665c26e479cb39d7af4a02d95543362f3dfd79497bcd
-
SSDEEP
6144:n7z1LvGhtH5+IPQrQKwzgGTEkXLP1reS:nv1yhtH5+kgQsGbP1rb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 500f49e9b0e965d35d437cfa1eb94bf0_NeikiAnalytics
Files
-
500f49e9b0e965d35d437cfa1eb94bf0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
ea7a1d66fd51e443b1d262a53c830506
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
lstrcpyA
lstrcatA
SetCurrentDirectoryA
GetLastError
FormatMessageA
LocalFree
GlobalReAlloc
lstrcmpiA
GetTickCount
lstrlenA
FindResourceA
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalFree
GlobalHandle
FreeLibrary
CompareStringW
SetStdHandle
CompareStringA
GetFileType
GetStdHandle
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
TerminateProcess
ExitProcess
GetCurrentProcess
GetOEMCP
GetACP
WriteFile
LCMapStringW
LCMapStringA
GetCPInfo
VirtualFree
HeapCreate
VirtualAlloc
FreeResource
GlobalUnlock
SetEndOfFile
FlushFileBuffers
MultiByteToWideChar
GetStringTypeW
HeapDestroy
WideCharToMultiByte
GetCommandLineA
GetStringTypeA
GetModuleHandleA
GetLocalTime
GetStartupInfoA
GetTimeZoneInformation
HeapAlloc
GetSystemTime
GetVersion
LoadLibraryA
HeapFree
HeapReAlloc
SetEnvironmentVariableA
CreateFileA
CloseHandle
SetFilePointer
ReadFile
GetProcAddress
user32
GetWindowRect
DialogBoxParamA
GetWindowDC
ScrollWindow
GetMessageA
PostQuitMessage
BeginPaint
EndDialog
EndPaint
GetDlgItemTextA
MoveWindow
MessageBoxA
GetDlgItem
SendDlgItemMessageA
SetFocus
CheckDlgButton
SetDlgItemTextA
IsDlgButtonChecked
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA
DestroyWindow
KillTimer
ShowWindow
SetTimer
UpdateWindow
TranslateMessage
GetSysColor
DispatchMessageA
PeekMessageA
SetCursor
GetCursor
GetMenu
EnableMenuItem
LoadBitmapA
FillRect
wsprintfA
LoadCursorA
GetDesktopWindow
LoadIconA
GetClientRect
InvalidateRect
ReleaseDC
GetSystemMetrics
GetDC
gdi32
SelectObject
CreateFontA
AddFontResourceA
StretchBlt
RealizePalette
SelectPalette
CreatePalette
GetDeviceCaps
SetDIBitsToDevice
DeleteObject
GetStockObject
SetBkMode
GetTextExtentPoint32A
CreateFontIndirectA
GetObjectA
TextOutA
SetBkColor
GetDIBits
StretchDIBits
SetStretchBltMode
GetTextMetricsA
AnimatePalette
GetSystemPaletteEntries
CreateDIBSection
CreateSolidBrush
RemoveFontResourceA
DeleteDC
ResetDCA
CreateCompatibleDC
CreateBitmapIndirect
BitBlt
StartDocA
StartPage
EndPage
EndDoc
comdlg32
PrintDlgA
shell32
ShellExecuteA
winmm
sndPlaySoundA
helpdll
_CreateHelpWindow@28
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 414KB - Virtual size: 414KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ