Static task
static1
Behavioral task
behavioral1
Sample
5d84e533753e2f2f9daef05dab0bb050_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5d84e533753e2f2f9daef05dab0bb050_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5d84e533753e2f2f9daef05dab0bb050_NeikiAnalytics
-
Size
2.6MB
-
MD5
5d84e533753e2f2f9daef05dab0bb050
-
SHA1
d25b093184164483aa818ad49779d632cc6839eb
-
SHA256
f529640e33f7cba15e8a371a4b080e5b7227bf69e5d9afbdeef27c8e595d511f
-
SHA512
89f58b09b62c5718d556369014352c612721fec9a31a850d9892b3766dd288c67519388d0989334948df99aeb498ba4df64808484bf29fef29678ffc71b2c88b
-
SSDEEP
49152:nYVs0arn5QxAT/hh7VMDQivgBInoV9ntfV4sMeXKdPQ5k3ApdpX:YSrrmu/hFVoLiIoV9t6RdPtO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d84e533753e2f2f9daef05dab0bb050_NeikiAnalytics
Files
-
5d84e533753e2f2f9daef05dab0bb050_NeikiAnalytics.exe windows:5 windows x86 arch:x86
4b1257d70569c5a9e79ea3959f8671fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
AssocQueryStringW
SHSetValueW
UrlEscapeW
UrlIsW
UrlCanonicalizeW
PathStripToRootW
PathRemoveFileSpecW
PathRemoveExtensionW
PathRemoveBlanksW
PathIsUNCServerW
PathIsRootW
PathIsRelativeW
PathFindExtensionW
PathCanonicalizeW
PathBuildRootW
PathAppendW
StrRetToBufW
StrCmpIW
StrToIntExW
StrRChrW
comctl32
CreateStatusWindowW
ImageList_Write
ImageList_DragMove
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Draw
ImageList_GetBkColor
ImageList_SetImageCount
ImageList_Destroy
FlatSB_GetScrollInfo
user32
DestroyIcon
FindWindowExW
SetWindowLongW
PtInRect
OffsetRect
SetRect
InvertRect
FrameRect
GetCursorPos
SetCursorPos
SetWindowTextW
BeginPaint
DrawTextW
GetSystemMenu
SetMenu
CheckDlgButton
SetDlgItemTextW
DialogBoxParamW
ShowOwnedPopups
DestroyWindow
CreateWindowExW
DrawFrameControl
setupapi
SetupCloseInfFile
CM_Locate_DevNodeW
CM_Get_Parent_Ex
SetupDiGetActualSectionToInstallW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiGetClassDevsExW
SetupDiGetSelectedDriverW
SetupDiEnumDriverInfoW
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupCloseFileQueue
SetupGetIntField
SetupGetFieldCount
SetupGetLineCountW
SetupDiGetClassDevsW
kernel32
VirtualFree
HeapCreate
HeapDestroy
HeapFree
GetLastError
TlsGetValue
SetLastError
RtlUnwind
WriteFile
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
LoadLibraryA
FindClose
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
VirtualAlloc
HeapReAlloc
GetEnvironmentStringsW
ReadFile
RaiseException
GetLocalTime
CreateProcessW
GetTempPathW
DeleteFileW
FindNextChangeNotification
CompareStringW
FreeConsole
GetVersion
ExitProcess
advapi32
RegOpenKeyExW
RegSetValueExW
urlmon
CoInternetCreateSecurityManager
CoInternetParseUrl
userenv
RegisterGPNotification
LoadUserProfileW
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 815KB - Virtual size: 33.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.w1tif Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ