Static task
static1
Behavioral task
behavioral1
Sample
aa7c7881cc27198c2dfc47eadb666d80_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
aa7c7881cc27198c2dfc47eadb666d80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
aa7c7881cc27198c2dfc47eadb666d80_NeikiAnalytics
-
Size
134KB
-
MD5
aa7c7881cc27198c2dfc47eadb666d80
-
SHA1
6c8d02eb5ca16659e1ae6a6f59971d3603233dc0
-
SHA256
9cc0041b543be907aa2460db543041043b5c64592677dbe6af211542775d3b26
-
SHA512
5373d0864d55747d488dcace25bbc060f0574399c2d4d53473208863e944926aaba82a5b18ac0f93a5ae3e4039b230911dc9827cbe03012333b0b98a003cfca0
-
SSDEEP
3072:p+ZF9q4eyqYtJ/CoS8yfe4/9QKvKLwi6CMWaqD82L:p+T9q4eyqYPS8Ue4l9vKLwi6CbD5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7c7881cc27198c2dfc47eadb666d80_NeikiAnalytics
Files
-
aa7c7881cc27198c2dfc47eadb666d80_NeikiAnalytics.exe windows:1 windows x86 arch:x86
8df2af978b7fb118c6ba177ef2f6b2c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
c60ascx
ASCII
c60runx
Cla$ACCEPTED
Cla$ADDqueue
Cla$ADDqueueptr
Cla$BEEP
Cla$BindG
Cla$BindV
Cla$CHOICE
Cla$CLEAR
Cla$ClearDec
Cla$clearstr
Cla$CLOSEwindow
Cla$code
Cla$COMMIT
Cla$comparestr
Cla$DecAdd
Cla$DecDistinct
Cla$DecDistinctR
Cla$DecDivide
Cla$DELETEqueue
Cla$DISABLE
Cla$DISPLAY
Cla$DPopDec
Cla$DPopLong
Cla$DPopUlong
Cla$DPushDec
Cla$DPushLong
Cla$duplicate
Cla$ENABLE
Cla$EndEventLoop
Cla$EndEventLoops
Cla$ERRORCODE
Cla$EVENT
Cla$FIELD
Cla$FILEERRORCODE
Cla$FILEERRORMSG
Cla$FILE_ADDf
Cla$FILE_BUILDf
Cla$FILE_BUILDk
Cla$FILE_CLOSE
Cla$FILE_CREATE
Cla$FILE_DELETE
CLA$FILE_DESTROY
Cla$FILE_EMPTY
Cla$FILE_GETfk
Cla$FILE_GETfl
Cla$FILE_GET_PROPERTY
Cla$FILE_LOCKf
Cla$FILE_NAME
Cla$FILE_NEXT
Cla$FILE_OPEN
Cla$FILE_POSITIONf
Cla$FILE_POSITIONk
Cla$FILE_PREV
Cla$FILE_PUTf
Cla$FILE_RECORDSf
Cla$FILE_REGETf
Cla$FILE_REGETk
Cla$FILE_RESETf
Cla$FILE_RESETk
Cla$FILE_SEND
Cla$FILE_SETf
Cla$FILE_SETk
Cla$FILE_SETkk
Cla$FILE_SET_PROPERTY
Cla$FILE_UNLOCK
Cla$FILE_WATCH
Cla$FREEqueue
Cla$FREEqueuea
Cla$freestr
Cla$FreeUfo
Cla$freewindow
Cla$GetPropS
Cla$GETqueueptr
Cla$Group2Ufo
Cla$HALT
Cla$init
Cla$IsAlpha
Cla$IsUpper
Cla$KEYCHAR
Cla$KEYCODE
Cla$loaddec
Cla$LOGOUT
Cla$Mem2Ufo
Cla$MessageBox
Cla$OPENwindow
Cla$pictstorelong
Cla$PopBind
Cla$PopCString
Cla$PopString
Cla$PopTemp
Cla$POPUP
Cla$POST
Cla$PRESSKEY
Cla$PRINTreport
Cla$propen
Cla$PushBind
Cla$PushCString
Cla$PushLong
Cla$PushReal
Cla$PushString
Cla$pwopen
Cla$RECORDSqueue
Cla$ROLLBACK
Cla$rterr
Cla$RUN
Cla$SELECT
Cla$SETCURSOR
Cla$SETKEYCODE
Cla$SetPropS
Cla$SetPropV
Cla$Stack2DStack
Cla$StackALL
Cla$StackCLIP
Cla$StackCompareN
Cla$StackCompareNEQ
Cla$StackCompareR
Cla$StackConcat
Cla$StackConcatR
Cla$StackErrstr
Cla$StackHeap
Cla$StackINSTRING
Cla$StackLen
Cla$StackLOWER
Cla$STACKpop
Cla$StackRotate
Cla$StackSUB
Cla$StackUPPER
Cla$StartEventLoop
Cla$STOP
Cla$storecstr
Cla$storestr
Cla$THREAD_FILE
Cla$TODAY
Cla$VIEW_SETvl
THR$GetInstance
VIEWDRIVER
Wsl$CloseDown
_exit
_free
_longjmp
_malloc
_setjmp
__sysinit
__sysstart
c60tpsx
TOPSPEED
user32
SystemParametersInfoA
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cwtls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.cwdebug Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ