Static task
static1
Behavioral task
behavioral1
Sample
d295c86b5bab9f473972497564e6d210_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
d295c86b5bab9f473972497564e6d210_NeikiAnalytics
-
Size
373KB
-
MD5
d295c86b5bab9f473972497564e6d210
-
SHA1
4cc03c19785386a26530bfc5bdfb2763e4720802
-
SHA256
8ca9e0b528d5b1b32b44c66c1be4b2ad58b9fc62d51fe93b781daf3d6cdcac60
-
SHA512
e3a2af95227825d38cf2b321dd75402c979025b06df1f0b20cf6dc761c27e22b880aba90ae25beaf3c407dfb183fec1aa5c87d01c4aef666701730eb3e944154
-
SSDEEP
6144:AgXLk9lsA7WNFchU6wxpMoyZVn4lt2DSTZATjxhNUP2uxZ698Obd3Tuto6:AgXLk91ar1rKRn4lAQ+1hNUOr9HxuS6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d295c86b5bab9f473972497564e6d210_NeikiAnalytics
Files
-
d295c86b5bab9f473972497564e6d210_NeikiAnalytics.exe windows:5 windows x86 arch:x86
c3092c10b1694e5744381700878f9059
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GlobalMemoryStatus
SetFilePointer
SetComputerNameExA
LoadLibraryExW
InterlockedDecrement
SetComputerNameW
SetCommBreak
CreateHardLinkA
LockFile
GetModuleHandleW
GetTickCount
ReadConsoleW
GetWindowsDirectoryA
EnumTimeFormatsA
SetCommState
GetSystemDirectoryW
GetVolumeInformationA
GlobalFindAtomA
LoadLibraryW
GetLocaleInfoW
ReadConsoleInputA
CreateEventA
GetConsoleAliasW
InterlockedExchange
OpenMutexW
GetLastError
SetLastError
BackupRead
GetProcAddress
RemoveDirectoryA
LocalAlloc
SetConsoleOutputCP
AddAtomA
GetOEMCP
BuildCommDCBA
VirtualProtect
GetTempPathA
SetFileAttributesW
CloseHandle
CreateFileW
WriteConsoleW
GetStringTypeW
HeapFree
EncodePointer
DecodePointer
IsProcessorFeaturePresent
ReadFile
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetProcessHeap
HeapSize
SetFilePointerEx
GetConsoleMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetCPInfo
GetCurrentThreadId
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
HeapReAlloc
LCMapStringW
SetStdHandle
FlushFileBuffers
OutputDebugStringW
SetEndOfFile
user32
GetSysColorBrush
SetMessageExtraInfo
SetMenu
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 232KB - Virtual size: 33.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ