Static task
static1
Behavioral task
behavioral1
Sample
c4ec23dc5a3427f1786870b3928db890_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c4ec23dc5a3427f1786870b3928db890_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
c4ec23dc5a3427f1786870b3928db890_NeikiAnalytics
-
Size
2.0MB
-
MD5
c4ec23dc5a3427f1786870b3928db890
-
SHA1
313a78211f167bb0951b56dd05795fc3fb6dc534
-
SHA256
a6c0d1e02f743f51d8d311ce8c906e081321b6514b5ef5ff688259b65cd91361
-
SHA512
ec9d2bda5c38cd70d788a9f0118100dfca0aa4a6904f5dcd7385a7da29b1f6ad8f4581a44675b0f79880959bd1a44458aa55b6564f3b10dac654761c201195ac
-
SSDEEP
24576:TWJ7dd0XbBnf2jCosdXLD6edU9CUfWs5M6zghwchWsWh/nLuVUPbzi801vGVKfig:yNdicj84CsmbUn+R41Kcg4c64
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4ec23dc5a3427f1786870b3928db890_NeikiAnalytics
Files
-
c4ec23dc5a3427f1786870b3928db890_NeikiAnalytics.exe windows:5 windows x86 arch:x86
e2f7bdb1735415585de8de7e17d50dc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
FindResourceExW
FindResourceW
FlushInstructionCache
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetLastError
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetShortPathNameW
GetStartupInfoW
GetThreadLocale
GetVersion
GetVersionExW
GlobalAlloc
GlobalFree
GlobalReAlloc
HeapAlloc
HeapFree
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LoadLibraryExW
LoadLibraryW
LoadResource
LockResource
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventW
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseSemaphore
RemoveDirectoryW
SetEvent
SetLastError
FindFirstFileW
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapReAlloc
GetOEMCP
GetACP
GetCPInfo
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
TlsGetValue
TlsAlloc
TlsSetValue
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
GetStartupInfoA
RtlUnwind
FindClose
ExpandEnvironmentStringsA
ExitProcess
DeleteFileW
DeleteCriticalSection
CreateSemaphoreW
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringW
CloseHandle
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
SetThreadPriority
GetDriveTypeA
user32
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
UnregisterClassA
UpdateWindow
WaitMessage
WindowFromPoint
SetDlgItemTextW
SetCursor
SetCapture
SendMessageW
SetRectEmpty
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassExW
PtInRect
PostThreadMessageW
PostQuitMessage
PeekMessageW
OffsetRect
MsgWaitForMultipleObjects
MessageBoxW
MapWindowPoints
LoadImageW
LoadCursorW
IsWindowUnicode
SendDlgItemMessageW
SetFocus
GetWindowThreadProcessId
GetForegroundWindow
BeginPaint
CallWindowProcW
IsWindowEnabled
IsDialogMessageW
InvalidateRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetSysColor
GetParent
GetMessageW
GetFocus
GetDlgItemTextW
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetCapture
GetAsyncKeyState
FillRect
EndPaint
EnableWindow
DrawTextW
DrawFocusRect
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyCursor
DefWindowProcW
CreateWindowExW
CreateDialogIndirectParamW
CreateCursor
CharNextW
GetMessageA
gdi32
GetDeviceCaps
GetObjectW
GetStockObject
DeleteObject
SetBkColor
SetBkMode
DeleteDC
CreateSolidBrush
CreateFontIndirectW
CreateDIBSection
SelectObject
BitBlt
CreateCompatibleDC
advapi32
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
shell32
ShellExecuteW
ole32
OleInitialize
CoCreateInstance
OleUninitialize
Sections
.text Size: 760KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vcp1202 Size: 999KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE