Static task
static1
Behavioral task
behavioral1
Sample
2d6868754bbb6dcb50c94462bd89d640_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d6868754bbb6dcb50c94462bd89d640_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2d6868754bbb6dcb50c94462bd89d640_NeikiAnalytics
-
Size
3.2MB
-
MD5
2d6868754bbb6dcb50c94462bd89d640
-
SHA1
c879f8d1fd99338021da9ed32efb01e61c8c01dd
-
SHA256
bb01f7acc8881152e888501c53bf6bbd5a123e68e07585388ae0b9dd97c87824
-
SHA512
9883ee8c551c0b6e6ccca5e4e0ef7f73a9444c7bcab23ecc1348fa171c3be0e0cd40900ce381e31b95b602367a4443fee184727536eacff2927051f84b74fb06
-
SSDEEP
6144:DAqQ3Hh1UWg+DE4zBSZ6AcnNxyKXL1d/9dM36/JuEo98u3Z/:k13/3pz0ZJONxZ1N26/JuE+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d6868754bbb6dcb50c94462bd89d640_NeikiAnalytics
Files
-
2d6868754bbb6dcb50c94462bd89d640_NeikiAnalytics.exe windows:4 windows x86 arch:x86
3988899ddc51061e73205b326048d627
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dsound
DirectSoundCreate
gdi32
GetStockObject
DeleteDC
CreateDIBSection
GdiFlush
CreateFontA
GetTextMetricsA
SetMapMode
SetBkMode
SetPolyFillMode
SetBkColor
CreateSolidBrush
GetGlyphOutlineA
StretchBlt
DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
GetDeviceCaps
imm32
ImmGetDefaultIMEWnd
ImmAssociateContext
kernel32
CreateEventA
SetCurrentDirectoryA
GetModuleFileNameA
CreateMutexA
GlobalFree
GlobalHandle
GlobalAlloc
FlushFileBuffers
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LCMapStringW
LCMapStringA
LoadLibraryA
GetCPInfo
SetEvent
GetACP
IsBadCodePtr
InitializeCriticalSection
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
TlsAlloc
CreateDirectoryA
GetFileSize
WriteFile
ReadFile
SetFilePointer
CloseHandle
CreateFileA
GetLastError
MultiByteToWideChar
WaitForSingleObject
GetLocalTime
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
Sleep
lstrcpynA
lstrcmpiA
lstrcpyA
GetPrivateProfileStringA
SetLastError
TlsFree
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileIntA
GetCurrentDirectoryA
lstrlenA
lstrcatA
GetOEMCP
DeleteCriticalSection
HeapSize
GetCurrentProcess
TerminateProcess
GetProcAddress
HeapReAlloc
HeapAlloc
GetVersionExA
GetCommandLineA
GetStartupInfoA
RtlUnwind
ExitProcess
RaiseException
IsBadReadPtr
ExitThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
CreateThread
GetModuleHandleA
shell32
ShellExecuteA
user32
EndDialog
DialogBoxParamA
PostMessageA
PostQuitMessage
DefWindowProcA
GetDlgItem
PeekMessageA
DispatchMessageA
TranslateMessage
ChangeDisplaySettingsA
ReleaseDC
SetWindowTextA
GetMessageA
GetClientRect
SetFocus
GetCursorPos
ScreenToClient
CheckMenuItem
DestroyMenu
LoadMenuA
GetFocus
GetAsyncKeyState
CharLowerA
GetUpdateRect
BeginPaint
EndPaint
SendMessageA
SetMenu
SetWindowLongA
SetWindowPos
GetWindowRect
AdjustWindowRect
CreateWindowExA
ShowWindow
UpdateWindow
DrawMenuBar
DestroyWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetDesktopWindow
MessageBoxA
SetRect
FillRect
GetDC
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
ole32
CoCreateInstance
CoUninitialize
CoInitialize
vorbisfile
ov_read
ov_pcm_seek
ov_info
ov_open_callbacks
ov_clear
Sections
peC Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.04Ver Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE