Static task
static1
Behavioral task
behavioral1
Sample
237f87a41f9e794cabcc823fef2aeec0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
237f87a41f9e794cabcc823fef2aeec0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
237f87a41f9e794cabcc823fef2aeec0_NeikiAnalytics
-
Size
262KB
-
MD5
237f87a41f9e794cabcc823fef2aeec0
-
SHA1
395e8548da1a71329b50f69353a0c6f9c2a594cf
-
SHA256
e3c09b51173e0abc5df68c26fb6dce106856174911fa5caa678c685b4326be82
-
SHA512
92f420222918207f3803eef211dd59eec14ba8bb9d37315b470084f87b9eb9a7586d8e550bf06f7e5e30ab8bd31ccdefc2c3b8f2de94f6ab691056d99348e296
-
SSDEEP
3072:+I2vim/wRx7UkuZkXlqXlKao2rUg+HYl3Ui0sosAldNUleXb8R9lEJnrkZ/V9R+w:+IO4RJrAl1oH5yYlEeMlErqd9K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 237f87a41f9e794cabcc823fef2aeec0_NeikiAnalytics
Files
-
237f87a41f9e794cabcc823fef2aeec0_NeikiAnalytics.exe windows:6 windows x86 arch:x86
16cfce5b25829e3405088f1afbf10960
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventW
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
GetTickCount
GetNativeSystemInfo
VirtualQuery
VirtualAllocEx
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateTimerQueueTimer
DeleteTimerQueueTimer
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetLocaleInfoW
GetSystemDefaultLCID
GetUserDefaultLCID
ExitProcess
OpenProcess
VirtualQueryEx
ReadFile
WriteFile
ConnectNamedPipe
CreateNamedPipeW
CreateRemoteThread
ReadProcessMemory
WriteProcessMemory
VirtualFreeEx
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
IsDBCSLeadByteEx
GetModuleHandleExW
RtlUnwind
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
DeleteCriticalSection
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetEvent
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RaiseException
CloseHandle
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
psapi
GetModuleFileNameExW
msvcrt
__uncaught_exception
__CxxFrameHandler
_amsg_exit
memmove
_wcsicmp
free
memcpy
_wtoi
fgetws
fclose
fflush
strrchr
fopen
_beginthreadex
_setmode
iswspace
_errno
wcstol
ceil
calloc
abort
malloc
_wcsdup
__pctype_func
___lc_codepage_func
___mb_cur_max_func
fgetwc
ungetwc
fgetc
fgetpos
fsetpos
setvbuf
ungetc
_CxxThrowException
tolower
_callnewh
_initterm
__p___argc
__p___argv
__p__commode
?terminate@@YAXXZ
_lock
_unlock
_iob
iswctype
_wcstoui64
___lc_handle_func
__lc_collate_cp
_lseeki64
_XcptFilter
__getmainargs
_environ
_msize
__set_app_type
_fmode
?_set_new_mode@@YAHH@Z
_control87
mbtowc
_isatty
_CIlog10
_clearfp
wcsrchr
strchr
memset
realloc
_fileno
Sections
.text Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 38.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ