Static task
static1
Behavioral task
behavioral1
Sample
2245e115c12c14a57f8825366082a7c0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2245e115c12c14a57f8825366082a7c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
2245e115c12c14a57f8825366082a7c0_NeikiAnalytics
-
Size
107KB
-
MD5
2245e115c12c14a57f8825366082a7c0
-
SHA1
3c1d001c737fe34f0bcb93502873acd6e71b8d02
-
SHA256
072828bb7afd8c0c3ae184d51f0ac97d8c436be0c044149ade29a38d48e12c96
-
SHA512
6d07210bbb2c930ae54a96eca9f941706c437bbc1f9b715b20012f5f63f968eb55d4daab06facdfcc5eb1278f071615e4d7cc9eb39ec5fc5e7a165456038bb62
-
SSDEEP
768:BcDxkqGLUrX1d9cYFiJE8fIgnzNvHevA0:BcDKd6Xr9lgJE83nz1He40
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2245e115c12c14a57f8825366082a7c0_NeikiAnalytics
Files
-
2245e115c12c14a57f8825366082a7c0_NeikiAnalytics.exe windows:6 windows x64 arch:x64
daa12b3c17e4efb3632c387c2d5f7784
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
qt5widgets
?qt_metacast@QWidget@@UEAAPEAXPEBD@Z
?qt_metacall@QWidget@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?staticMetaObject@QWidget@@2UQMetaObject@@B
?show@QWidget@@QEAAXXZ
??0QApplication@@QEAA@AEAHPEAPEADH@Z
?dragEnterEvent@QWidget@@MEAAXPEAVQDragEnterEvent@@@Z
?exec@QApplication@@SAHXZ
?resize@QWidget@@QEAAXHH@Z
?width@QWidget@@QEBAHXZ
?height@QWidget@@QEBAHXZ
??0QWidget@@QEAA@PEAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
??1QWidget@@UEAA@XZ
?devType@QWidget@@UEBAHXZ
?setWindowTitle@QWidget@@QEAAXAEBVQString@@@Z
?update@QWidget@@QEAAXXZ
?setVisible@QWidget@@UEAAX_N@Z
?sizeHint@QWidget@@UEBA?AVQSize@@XZ
?minimumSizeHint@QWidget@@UEBA?AVQSize@@XZ
?heightForWidth@QWidget@@UEBAHH@Z
?hasHeightForWidth@QWidget@@UEBA_NXZ
?paintEngine@QWidget@@UEBAPEAVQPaintEngine@@XZ
?event@QWidget@@MEAA_NPEAVQEvent@@@Z
?mousePressEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?wheelEvent@QWidget@@MEAAXPEAVQWheelEvent@@@Z
?keyPressEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z
??1QApplication@@UEAA@XZ
?keyReleaseEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z
?focusInEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?focusOutEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?enterEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?leaveEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?moveEvent@QWidget@@MEAAXPEAVQMoveEvent@@@Z
?resizeEvent@QWidget@@MEAAXPEAVQResizeEvent@@@Z
?closeEvent@QWidget@@MEAAXPEAVQCloseEvent@@@Z
?contextMenuEvent@QWidget@@MEAAXPEAVQContextMenuEvent@@@Z
?tabletEvent@QWidget@@MEAAXPEAVQTabletEvent@@@Z
?actionEvent@QWidget@@MEAAXPEAVQActionEvent@@@Z
?dragMoveEvent@QWidget@@MEAAXPEAVQDragMoveEvent@@@Z
?focusNextPrevChild@QWidget@@MEAA_N_N@Z
?inputMethodQuery@QWidget@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MEAAXPEAVQInputMethodEvent@@@Z
?sharedPainter@QWidget@@MEBAPEAVQPainter@@XZ
?dragLeaveEvent@QWidget@@MEAAXPEAVQDragLeaveEvent@@@Z
?redirected@QWidget@@MEBAPEAVQPaintDevice@@PEAVQPoint@@@Z
?initPainter@QWidget@@MEBAXPEAVQPainter@@@Z
?metric@QWidget@@MEBAHW4PaintDeviceMetric@QPaintDevice@@@Z
?changeEvent@QWidget@@MEAAXPEAVQEvent@@@Z
?nativeEvent@QWidget@@MEAA_NAEBVQByteArray@@PEAXPEAJ@Z
?hideEvent@QWidget@@MEAAXPEAVQHideEvent@@@Z
?showEvent@QWidget@@MEAAXPEAVQShowEvent@@@Z
?dropEvent@QWidget@@MEAAXPEAVQDropEvent@@@Z
qt5gui
??0QColor@@QEAA@HHHH@Z
?drawLine@QPainter@@QEAAXHHHH@Z
?translate@QPainter@@QEAAXNN@Z
??0QBrush@@QEAA@AEBVQColor@@W4BrushStyle@Qt@@@Z
??1QBrush@@QEAA@XZ
??0QPainter@@QEAA@PEAVQPaintDevice@@@Z
??1QPainter@@QEAA@XZ
?setPen@QPainter@@QEAAXW4PenStyle@Qt@@@Z
?setPen@QPainter@@QEAAXAEBVQColor@@@Z
?setBrush@QPainter@@QEAAXAEBVQBrush@@@Z
?save@QPainter@@QEAAXXZ
?restore@QPainter@@QEAAXXZ
?scale@QPainter@@QEAAXNN@Z
?rotate@QPainter@@QEAAXN@Z
?drawConvexPolygon@QPainter@@QEAAXPEBVQPoint@@H@Z
?setRenderHint@QPainter@@QEAAXW4RenderHint@1@_N@Z
qt5core
?staticMetaObject@QObject@@2UQMetaObject@@B
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
?qt_metacast@QObject@@UEAAPEAXPEBD@Z
?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QString@@QEAA@AEBVQByteArray@@@Z
??4QString@@QEAAAEAV0@AEBVQByteArray@@@Z
?isDigit@QCharRef@@QEBA_NXZ
?front@QString@@QEAA?AVQCharRef@@XZ
??0QCryptographicHash@@QEAA@W4Algorithm@0@@Z
??1QCryptographicHash@@QEAA@XZ
?addData@QCryptographicHash@@QEAA_NPEAVQIODevice@@@Z
?result@QCryptographicHash@@QEBA?AVQByteArray@@XZ
??8@YA_NAEBVQString@@0@Z
?read@QIODevice@@QEAA?AVQByteArray@@_J@Z
?write@QIODevice@@QEAA_JPEBD@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
?right@QString@@QEBA?AV1@H@Z
?number@QString@@SA?AV1@_JH@Z
?machineUniqueId@QSysInfo@@SA?AVQByteArray@@XZ
??0QFile@@QEAA@AEBVQString@@@Z
?toHex@QByteArray@@QEBA?AV1@XZ
??0QObject@@QEAA@PEAV0@@Z
??1QObject@@UEAA@XZ
?hash@QMessageAuthenticationCode@@SA?AVQByteArray@@AEBV2@0W4Algorithm@QCryptographicHash@@@Z
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
??0QByteArray@@QEAA@XZ
??1QByteArray@@QEAA@XZ
?size@QByteArray@@QEBAHXZ
?data@QByteArray@@QEAAPEADXZ
?constData@QByteArray@@QEBAPEBDXZ
??0QByteArray@@QEAA@AEBV0@@Z
??YQByteArray@@QEAAAEAV0@AEBV0@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??YQString@@QEAAAEAV0@VQChar@@@Z
??YQString@@QEAAAEAV0@AEBV0@@Z
?toLocal8Bit@QString@@QEGBA?AVQByteArray@@XZ
?toLocal8Bit@QString@@QEHAA?AVQByteArray@@XZ
?fromUtf8@QString@@SA?AV1@PEBDH@Z
??0QString@@QEAA@PEBD@Z
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@XZ
??1QString@@QEAA@XZ
??8QString@@QEBA_NPEBD@Z
?dispose@QListData@@QEAAXXZ
?registerResource@QResource@@SA_NPEBEAEBVQString@@@Z
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?number@QByteArray@@SA?AV1@_JH@Z
?clear@QByteArray@@QEAAXXZ
?writableLocation@QStandardPaths@@SA?AVQString@@W4StandardLocation@1@@Z
?mid@QContainerImplHelper@QtPrivate@@SA?AW4CutResult@12@HPEAH0@Z
?timerEvent@QTimer@@MEAAXPEAVQTimerEvent@@@Z
?timeout@QTimer@@QEAAXUQPrivateSignal@1@@Z
?start@QTimer@@QEAAXH@Z
??1QTimer@@UEAA@XZ
??0QTimer@@QEAA@PEAVQObject@@@Z
?qt_metacall@QTimer@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QTimer@@UEAAPEAXPEBD@Z
?metaObject@QTimer@@UEBAPEBUQMetaObject@@XZ
?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?setFileName@QFile@@QEAAXAEBVQString@@@Z
??1QFile@@UEAA@XZ
??0QFile@@QEAA@XZ
?shared_null@QListData@@2UData@1@B
?utf16@QString@@QEBAPEBGXZ
?close@QFileDevice@@UEAAXXZ
?readAll@QIODevice@@QEAA?AVQByteArray@@XZ
?tempPath@QDir@@SA?AVQString@@XZ
?separator@QDir@@SA?AVQChar@@XZ
?toNativeSeparators@QDir@@SA?AVQString@@AEBV2@@Z
??1Connection@QMetaObject@@QEAA@XZ
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?hash@QCryptographicHash@@SA?AVQByteArray@@AEBV2@W4Algorithm@1@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
?toString@QDateTime@@QEBA?AVQString@@AEBV2@@Z
??1QDateTime@@QEAA@XZ
?staticMetaObject@QTimer@@2UQMetaObject@@B
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?arguments@QCoreApplication@@SA?AVQStringList@@XZ
?currentTime@QTime@@SA?AV1@XZ
?second@QTime@@QEBAHXZ
?minute@QTime@@QEBAHXZ
?hour@QTime@@QEBAHXZ
?dispose@QListData@@SAXPEAUData@1@@Z
?realloc@QListData@@QEAAXH@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
?instance@QCoreApplication@@SAPEAV1@XZ
?write@QIODevice@@QEAA_JAEBVQByteArray@@@Z
kernel32
GetCommandLineW
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
LocalFree
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentProcessId
WideCharToMultiByte
WriteFile
CreateProcessW
GetProcAddress
CloseHandle
LoadLibraryA
Sleep
WaitForSingleObject
GetCurrentProcess
advapi32
OpenProcessToken
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
__current_exception
__std_exception_destroy
__std_exception_copy
__C_specific_handler
__std_terminate
__current_exception_context
_CxxThrowException
api-ms-win-crt-runtime-l1-1-0
_exit
_set_app_type
_register_onexit_function
terminate
_initterm
_initialize_onexit_table
_seh_filter_exe
_cexit
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
exit
_register_thread_local_exe_atexit_callback
_initterm_e
_c_exit
_crt_atexit
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
shell32
CommandLineToArgvW
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ