Static task
static1
Behavioral task
behavioral1
Sample
833f16cfec6b37c6e8bd3459a7f44d40_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
833f16cfec6b37c6e8bd3459a7f44d40_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
833f16cfec6b37c6e8bd3459a7f44d40_NeikiAnalytics
-
Size
2.2MB
-
MD5
833f16cfec6b37c6e8bd3459a7f44d40
-
SHA1
014549588ee6a6ed1300e37cff8d2c720d2d1c66
-
SHA256
e706ae4807c9f34caa67328dc406907bdd2efd4f95aab8bfac4761520311563b
-
SHA512
37ee4782a236ff6e03c4fdd2f9eb386071f605618473c87a6a7f05e5937bf5495d91fc89aeda2fdfca9aba8696c478a5a4ce534de0c65c85b30655095825c117
-
SSDEEP
24576:1miVIseNorXAXA8R4kp28h1EsSSmUoOJwmMegDt136G5VaKaMMOv0qwA1b+P8ZYK:Tby+c2O1B8heg7fDv1RZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 833f16cfec6b37c6e8bd3459a7f44d40_NeikiAnalytics
Files
-
833f16cfec6b37c6e8bd3459a7f44d40_NeikiAnalytics.exe windows:5 windows x86 arch:x86
62467b87d6fe8b7b2741d893c3d7d085
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnmapViewOfFile
WideCharToMultiByte
WriteFile
GetStringTypeA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
ReadFile
TlsAlloc
TlsSetValue
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
ExitProcess
GetVersion
GetStartupInfoA
RtlUnwind
LCMapStringA
LCMapStringW
QueryPerformanceCounter
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
lstrlenW
lstrlenA
lstrcpyW
lstrcmpiW
lstrcatW
LocalFree
LocalAlloc
LoadLibraryW
GetStringTypeW
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExA
GetTimeFormatW
GetTimeFormatA
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemDefaultLangID
GetStartupInfoW
GetShortPathNameW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocalTime
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
GetDateFormatW
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryW
FreeLibrary
FindNextFileW
FindFirstFileW
FindClose
ExpandEnvironmentStringsA
DeleteFileW
CreateProcessW
CreateFileW
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetDriveTypeA
TlsGetValue
user32
SetRectEmpty
SetForegroundWindow
SetCursorPos
SetClipboardData
SetCapture
SendMessageW
ScreenToClient
ReleaseDC
ReleaseCapture
RedrawWindow
PtInRect
PostMessageW
OpenClipboard
SetScrollInfo
MessageBoxW
MessageBoxA
MapWindowPoints
LoadMenuW
LoadImageW
LoadIconW
SetTimer
SetWindowRgn
SystemParametersInfoA
SystemParametersInfoW
LoadCursorW
LoadBitmapW
KillTimer
IsWindowVisible
IsRectEmpty
IsIconic
UpdateWindow
wsprintfW
OffsetRect
InvalidateRect
IntersectRect
InflateRect
GetWindowRect
GetWindowPlacement
GetWindow
GetSystemMetrics
GetSysColor
GetSubMenu
GetScrollInfo
GetParent
GetMessageW
GetMessagePos
GetLastActivePopup
GetKeyState
GetKeyboardLayout
GetFocus
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FillRect
EnableWindow
EmptyClipboard
DrawTextW
DrawIconEx
DrawFocusRect
DispatchMessageW
GetForegroundWindow
GetWindowThreadProcessId
SendMessageTimeoutW
gdi32
MaskBlt
LineTo
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextMetricsW
GetTextFaceW
GetTextExtentPoint32W
GetTextExtentPoint32A
GetStockObject
GetObjectW
GetMetaFileBitsEx
GetGlyphOutlineW
GetFontData
GetDIBits
GetDeviceCaps
GetDCOrgEx
GetClipBox
GdiFlush
FillPath
ExtTextOutW
ExtCreatePen
EnumFontFamiliesExW
Ellipse
DeleteObject
DeleteMetaFile
DeleteEnhMetaFile
DeleteDC
MoveToEx
CreateRectRgnIndirect
CreateRectRgn
CreatePalette
CreateMetaFileW
CreateHatchBrush
CreateFontW
CreateFontIndirectW
CreateEnhMetaFileW
CreateEllipticRgn
CreateDIBSection
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBColorTable
SetMapMode
SetPixel
SetPixelV
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetViewportOrgEx
StretchBlt
StretchDIBits
TextOutA
PatBlt
PlayEnhMetaFile
Polygon
Polyline
PolyPolygon
PolyPolyline
RealizePalette
CreateSolidBrush
ResetDCW
Rectangle
advapi32
RegQueryValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
ShellExecuteExW
ShellExecuteW
ExtractIconW
ole32
CoGetMalloc
StgCreateDocfile
StgOpenStorage
CoTaskMemFree
CreateStreamOnHGlobal
shlwapi
PathCombineA
PathFindExtensionW
PathCompactPathExW
Sections
.text Size: 756KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_libcc8_ Size: 799KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE