Static task
static1
Behavioral task
behavioral1
Sample
d4f34220a774ec5407ae7295867c8710_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d4f34220a774ec5407ae7295867c8710_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d4f34220a774ec5407ae7295867c8710_NeikiAnalytics
-
Size
584KB
-
MD5
d4f34220a774ec5407ae7295867c8710
-
SHA1
c38fd9ed27dbdf5f88e56b1f53565ed1edbd9665
-
SHA256
1692c60457087e43655c0241ea172118fe9b6543e33990211820a486ccdffb76
-
SHA512
695c8a8cac0ae2b722b849e7deb42eca331da65120768f2a9f99b8b1a591241cde76d3f9b93f202334ad9cc76a287630dc0905ceaddc7c2840488d0d289550c2
-
SSDEEP
6144:76/ykKvxQwS5zQ1L77rJuuYZoWHP8SneV8QeewQeeTQeesQee/VQeefQeeyp3jxb:2/5QQwuzIH7duu8hH/eTjx4hLIM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4f34220a774ec5407ae7295867c8710_NeikiAnalytics
Files
-
d4f34220a774ec5407ae7295867c8710_NeikiAnalytics.exe windows:4 windows x86 arch:x86
b805655068ed29781640350a903218ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
winmm
timeGetTime
wininet
HttpSendRequestA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetReadFile
HttpOpenRequestA
kernel32
GetVersion
GetLastError
CloseHandle
WriteFile
ReadFile
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
GetProcAddress
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
CreateFileA
MultiByteToWideChar
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CompareStringA
GetCommandLineA
SetEnvironmentVariableA
RaiseException
IsProcessorFeaturePresent
CompareStringW
OutputDebugStringA
GetModuleFileNameA
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetModuleHandleA
RtlUnwind
user32
GetKeyboardState
DefWindowProcA
ToAsciiEx
MapVirtualKeyExA
GetKeyboardLayout
MessageBoxA
UpdateWindow
BeginPaint
EndPaint
PostQuitMessage
SetWindowPos
DestroyWindow
UnregisterClassA
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
InvalidateRect
DispatchMessageA
CreateWindowExA
TranslateMessage
PeekMessageA
SetFocus
ShowWindow
ShowCursor
advapi32
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoUninitialize
CoInitialize
d3d8
Direct3DCreate8
dinput8
DirectInput8Create
dsound
ord1
bass
BASS_Pause
BASS_Stop
BASS_MusicPlayEx
BASS_Start
BASS_MusicLoad
BASS_SampleLoad
BASS_SetGlobalVolumes
BASS_Free
BASS_GetVersion
BASS_Init
BASS_ErrorGetCode
BASS_SampleStop
BASS_SamplePlay
Sections
.text Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE