Static task
static1
Behavioral task
behavioral1
Sample
afae76551683236c533677ee389cd6e0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
afae76551683236c533677ee389cd6e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
afae76551683236c533677ee389cd6e0_NeikiAnalytics
-
Size
536KB
-
MD5
afae76551683236c533677ee389cd6e0
-
SHA1
47a410213f7d657380aaf3ac95af86f1be9c0552
-
SHA256
3a27485643e49ee994e94e4185b2d1e3022a7d0a16a5a12bf353580ced059089
-
SHA512
a8756afa69c4463110e58d2f22bd66e25455e1cf326af8d23f2b3457d895687d9c422129d4625d6b6cb9f5225b887acd14c00c3787b3f17d912d63a9fe38d84a
-
SSDEEP
6144:rd09ji4owii9DX3cXthk5tuEsgpl6qvu1rur2jha1I22+Qq8:Z06wia8vwuEdpl6qG1rur2jI1IWD8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afae76551683236c533677ee389cd6e0_NeikiAnalytics
Files
-
afae76551683236c533677ee389cd6e0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
42a05420878e012f660a5cae92f782fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
LCMapStringA
LCMapStringW
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetCPInfo
CompareStringA
CompareStringW
GetModuleHandleA
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
GetLastError
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
FlushFileBuffers
CloseHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
GetTimeZoneInformation
IsBadCodePtr
GetACP
GetOEMCP
ReadFile
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
Sections
.text Size: 456KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ