Static task
static1
Behavioral task
behavioral1
Sample
59e0e9fd19d4be50adbd54d1c19fb0f0_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
59e0e9fd19d4be50adbd54d1c19fb0f0_NeikiAnalytics
-
Size
498KB
-
MD5
59e0e9fd19d4be50adbd54d1c19fb0f0
-
SHA1
3ad99c36819fed5af37608abe2e594b3bcf086f4
-
SHA256
82a31c8ae8c76013f3d26259203a6a7ef556e5ce29fe17effec6c843cfc04fb8
-
SHA512
f27ca7bdd1e01c8a37ba31a44b8bcfc4ab007bae2a277fd6796e90f0375b10accf2925af9dbadff9efdc26c5920377437e29e7e9ca1ed638b0b2cca20276ebf3
-
SSDEEP
12288:VyN9+SCK7/MwsyBFHnB1tQh0p6ZWKTPYiiTGATd+yKB:8aIXtQhA6iilAJ+yU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59e0e9fd19d4be50adbd54d1c19fb0f0_NeikiAnalytics
Files
-
59e0e9fd19d4be50adbd54d1c19fb0f0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
b7f2ebd45b12477c461073524fd0810f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetLocaleInfoA
GetNumberFormatA
FormatMessageA
FindFirstFileA
GetLastError
FindClose
FindNextFileA
GetCurrentDirectoryA
LocalFree
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MoveFileA
HeapFree
DeleteFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetProcAddress
GetModuleHandleW
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetCommandLineA
HeapSetInformation
RaiseException
GetCPInfo
RtlUnwind
HeapAlloc
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
HeapSize
GetLocaleInfoW
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
HeapCreate
ReadFile
SetFilePointer
FlushFileBuffers
CloseHandle
CreateFileA
GetModuleFileNameW
GetTimeZoneInformation
LoadLibraryW
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapReAlloc
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
CreateFileW
Sections
.text Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE