Static task
static1
Behavioral task
behavioral1
Sample
05db526b72f52ac2225af70f154798a0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05db526b72f52ac2225af70f154798a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
05db526b72f52ac2225af70f154798a0_NeikiAnalytics
-
Size
145KB
-
MD5
05db526b72f52ac2225af70f154798a0
-
SHA1
310392fa02114e654c489b70b252bdbc51e7b822
-
SHA256
2f6ce1a5ae771b86b5c8c780499816bfffa12d160c4518f3b64cdcccf70968b9
-
SHA512
d9d830d0138d79f8a83e174e9932620f1ad733badeb4bd4bf8236bb7b43254c91bf8fca47eb0cd9fa142135ecbac040664649fe540e68a1dca660bda9f287ebd
-
SSDEEP
3072:qsXny9uL1BygP6F3+/IKqMUPNZUpQAYtZfoZ26TLSLWw6l:vXny9cQyqN1wQATZb8e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05db526b72f52ac2225af70f154798a0_NeikiAnalytics
Files
-
05db526b72f52ac2225af70f154798a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
87435632dd05bd1ffd6a607f29a7a733
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateFileW
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathW
GetTickCount
GetVersionExA
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
UnhandledExceptionFilter
VirtualProtect
GetLocaleInfoA
user32
BeginPaint
DefWindowProcA
EndPaint
FillRect
GetClientRect
GetDC
GetSystemMetrics
InvalidateRect
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
PostMessageA
RegisterClassW
ScrollWindowEx
SendMessageA
EnableWindow
advapi32
RegOpenKeyExA
RegQueryValueExA
gdi32
CreateCompatibleDC
DeleteObject
SelectObject
DeleteDC
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE