Static task
static1
Behavioral task
behavioral1
Sample
93c7234415bdc59e557d86baa09a2d70_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
93c7234415bdc59e557d86baa09a2d70_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
93c7234415bdc59e557d86baa09a2d70_NeikiAnalytics
-
Size
251KB
-
MD5
93c7234415bdc59e557d86baa09a2d70
-
SHA1
eb5ad8a4be6f4a6839c32334fcd02ae39d45eea5
-
SHA256
022a70692a5733408170adc7062f316ac22b8d24a5b866cbd2d43357706c1b01
-
SHA512
0af3a52b633106f731d06488b488178fe7515da9fdaf132e53929b6b5e6781b142c39bda8840bdd071609998c31d66f69af845caf56399e5aa7e33a139cd31ea
-
SSDEEP
6144:NiT0g4vIw+4zzwuSVVFlv0lC17ltL2YC5h7jF+bF/h2i23lFGG/:Nng4l+IzUXvhZltSd3cx/qVkG/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93c7234415bdc59e557d86baa09a2d70_NeikiAnalytics
Files
-
93c7234415bdc59e557d86baa09a2d70_NeikiAnalytics.exe windows:5 windows x86 arch:x86
d392db9c761dece8560a06cfabf7d958
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStartupInfoA
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
IsValidCodePage
GetOEMCP
HeapReAlloc
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RaiseException
GetStartupInfoW
LeaveCriticalSection
EnterCriticalSection
MulDiv
FindResourceExW
EndUpdateResourceW
HeapAlloc
GetTempFileNameW
HeapFree
GetModuleFileNameA
CopyFileW
SetLastError
GetLocaleInfoA
GetSystemDirectoryA
GetTimeZoneInformation
GetModuleHandleA
GetCurrentProcess
SetFileAttributesW
DeleteFileW
MoveFileExW
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
GetACP
CreateFileA
GetFileSize
OutputDebugStringW
lstrcpyA
OutputDebugStringA
GetVersionExW
GetModuleFileNameW
SetCurrentDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeResource
SetFileTime
GetFileAttributesW
CreateDirectoryW
WideCharToMultiByte
MultiByteToWideChar
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
SetFilePointer
GetModuleHandleW
GetTempPathW
GetCommandLineW
LocalFree
CreateProcessW
CreateFileW
WriteFile
GetLastError
CloseHandle
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentDirectoryW
GetLocalTime
GetConsoleMode
GetConsoleCP
RtlUnwind
CreateThread
WaitForSingleObject
Sleep
GetExitCodeProcess
GetCPInfo
user32
RegisterClassW
GetDlgItem
EndDialog
InvalidateRect
GetWindowRect
EnableWindow
IsWindowEnabled
wsprintfW
SetWindowTextW
MessageBoxA
SendMessageA
SetWindowTextA
MapWindowPoints
wvsprintfA
wsprintfA
MessageBoxW
MoveWindow
DialogBoxParamA
DialogBoxParamW
SetCursor
DestroyWindow
GetDesktopWindow
LoadIconW
LoadCursorW
CreateDialogParamW
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
BeginPaint
EndPaint
GetDC
ScreenToClient
GetClientRect
FillRect
DrawTextW
UpdateWindow
GetWindowTextW
ShowWindow
GetSystemMetrics
SetWindowPos
PostMessageW
GetSystemMenu
EnableMenuItem
SendMessageW
SetFocus
gdi32
GetDeviceCaps
CreateFontA
CreateFontW
CreateDIBSection
CreateCompatibleDC
BitBlt
DeleteDC
SelectObject
CreatePen
Rectangle
SetBkMode
SetTextColor
DeleteObject
GetStockObject
GetObjectW
CreateSolidBrush
advapi32
OpenServiceW
CryptCreateHash
CryptDeriveKey
CryptAcquireContextW
CryptDestroyHash
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegConnectRegistryW
OpenSCManagerW
CryptReleaseContext
StartServiceW
CloseServiceHandle
CryptGetHashParam
CryptDecrypt
CryptDestroyKey
CryptHashData
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
msimg32
AlphaBlend
lz32
LZOpenFileW
LZClose
LZCopy
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE