Static task
static1
Behavioral task
behavioral1
Sample
b2929418072c0a045c1c1c0af5ba4750_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
b2929418072c0a045c1c1c0af5ba4750_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b2929418072c0a045c1c1c0af5ba4750_NeikiAnalytics
-
Size
6.9MB
-
MD5
b2929418072c0a045c1c1c0af5ba4750
-
SHA1
2bf8a6399e4ea1272437fc0af46d2d46b7e188c3
-
SHA256
34706d7b99a7f8b8270ef732c596526ee7edb80b86cc40583b93a3cbeb102382
-
SHA512
e971ac71beb160ea79ca70c01bea2e8c4466e52fc9f8ef205fbc594ff2f425db6b2b458bea76c05214969ac4e147c3e6e5a3c6342214ccf66dbbfbbffa672386
-
SSDEEP
98304:jrt2/HGRgwAQ9zcmCUNyb1Lb8irt0OJNW:jU/H9wAQ9zdN8b8mtfJNW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2929418072c0a045c1c1c0af5ba4750_NeikiAnalytics
Files
-
b2929418072c0a045c1c1c0af5ba4750_NeikiAnalytics.exe windows:4 windows x64 arch:x64
cac28d9783b92484ff25e072a8187ff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
ntdll
NtWaitForSingleObject
ws2_32
WSAGetOverlappedResult
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerA
DuplicateHandle
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetQueuedCompletionStatus
GetStdHandle
GetSystemInfo
GetThreadContext
LoadLibraryW
LoadLibraryA
ResumeThread
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
SuspendThread
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteFile
winmm
timeBeginPeriod
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 446KB - Virtual size: 445KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ