Static task
static1
Behavioral task
behavioral1
Sample
088f1eb9a375cd47ca2328d1774abba0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
088f1eb9a375cd47ca2328d1774abba0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
088f1eb9a375cd47ca2328d1774abba0_NeikiAnalytics
-
Size
128KB
-
MD5
088f1eb9a375cd47ca2328d1774abba0
-
SHA1
4d05b361811932167d4194749eaa0030e1bce0e5
-
SHA256
a57a5e2c26764c23568afd535db4fe14aa7a947c4d90c7f43f7f6554ccfb203c
-
SHA512
61d21a8293247ab137e1279567d2317bb070a06aaa759f737be4170db1a6296accb80023bbb95a92e6926924ef0a035fc1c4551210c5ea93e27a6ca522c7d8e3
-
SSDEEP
3072:VC2sGFK+HlPMhxp6+Td83EMb3AG50Wld5y:2b+dMhEDAG5blXy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 088f1eb9a375cd47ca2328d1774abba0_NeikiAnalytics
Files
-
088f1eb9a375cd47ca2328d1774abba0_NeikiAnalytics.exe windows:1 windows x86 arch:x86
bacc34292e342251c55a60fd57417bfd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringA
ws2_32
WSACleanup
WSAStartup
user32
GetWindowTextA
LoadStringA
shlwapi
PathAppendW
PathCombineW
PathFileExistsA
PathFileExistsW
kernel32
CloseHandle
CreateEventW
DeleteFileA
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeLibrary
GetDateFormatW
GetFileTime
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTimeFormatW
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OpenProcess
VirtualProtect
WideCharToMultiByte
WriteConsoleW
lstrlenW
QueryPerformanceCounter
ntdsapi
DsUnBindW
advapi32
RegCloseKey
RegOpenKeyExW
RegConnectRegistryW
netapi32
NetApiBufferFree
DsGetDcNameW
ntdll
memmove
wcschr
wcslen
wcscpy
rpcrt4
RpcBindingFree
Sections
AUTO Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 113KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ