Static task
static1
Behavioral task
behavioral1
Sample
7f6d7f8dc4a8c17169124852ecb478c0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7f6d7f8dc4a8c17169124852ecb478c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
7f6d7f8dc4a8c17169124852ecb478c0_NeikiAnalytics
-
Size
40KB
-
MD5
7f6d7f8dc4a8c17169124852ecb478c0
-
SHA1
b122a0c96614348756dbcd2684cc7333f84215a6
-
SHA256
be22d603318978fd7d2546d6af3d7f1dd1fb410b9e2a25fd52999d31d40e06d1
-
SHA512
a9a581df81603abd71fb7f7b82731d344ae742133d0a6e0fdabb9f8986408109ca747c5cc31166db6972756d8dd007a0fdb685a693def6642e795526d59975db
-
SSDEEP
768:cuSi3A8Of5nCICQlZ7cimuiB9RQg6RiU+thRo9fo+rS:pRbICgl/yopIo9S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f6d7f8dc4a8c17169124852ecb478c0_NeikiAnalytics
Files
-
7f6d7f8dc4a8c17169124852ecb478c0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
0db13e75e2994107fd943a6a81e8c190
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
UpdateWindow
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
SetScrollRange
GetDlgItemTextA
EndDialog
GetDC
SetScrollPos
PostQuitMessage
EndPaint
ReleaseDC
BeginPaint
InvalidateRect
ScrollWindow
DialogBoxParamA
DefWindowProcA
SendMessageA
MessageBoxA
RegisterClassExA
LoadIconA
LoadCursorA
gdi32
GetTextMetricsA
SetTextAlign
TextOutA
GetStockObject
kernel32
TerminateProcess
GetModuleFileNameA
FreeEnvironmentStringsA
CloseHandle
FlushFileBuffers
LCMapStringA
SetStdHandle
LCMapStringW
HeapReAlloc
LoadLibraryA
HeapAlloc
GetOEMCP
VirtualAlloc
GetCPInfo
GetStringTypeW
GetACP
MultiByteToWideChar
SetFilePointer
GetStringTypeA
WriteFile
RtlUnwind
GetLastError
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
WideCharToMultiByte
GetCurrentProcess
UnhandledExceptionFilter
HeapCreate
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ