Static task
static1
Behavioral task
behavioral1
Sample
313aefa4bd394d183fcc6906a3c35ee0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
313aefa4bd394d183fcc6906a3c35ee0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
313aefa4bd394d183fcc6906a3c35ee0_NeikiAnalytics
-
Size
284KB
-
MD5
313aefa4bd394d183fcc6906a3c35ee0
-
SHA1
5315a85f379736cf79c68ee8cb25c10bc2b8d630
-
SHA256
276f9b9cfdb06616427a394bd428aac1974e3a9f9148cd784d1ffb78eb6e275d
-
SHA512
e868b5cfc403e5547af2835eeebda167672bcf7049dcae31abe52b0f9c8fdc753dd45582b3439b994dcb0d7d4d4b36b3c30886327a75ba361fe3dde1ab8e5276
-
SSDEEP
6144:X64QDuPVXmkoy7EnKEViqjkZ0x+lFeug2F9aPjYk8rxhG:XrQDH47HZkEraPcrrxhG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 313aefa4bd394d183fcc6906a3c35ee0_NeikiAnalytics
Files
-
313aefa4bd394d183fcc6906a3c35ee0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
919b2929a9c88a7dcad17667bdfea57f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
SetUrlCacheEntryInfoA
InternetOpenW
InternetShowSecurityInfoByURLW
FindNextUrlCacheEntryW
InternetCrackUrlW
InternetCanonicalizeUrlW
UpdateUrlCacheContentPath
GetUrlCacheHeaderData
FtpRenameFileA
InternetWriteFileExW
UnlockUrlCacheEntryStream
InternetOpenUrlW
InternetQueryDataAvailable
GopherGetAttributeA
IsHostInProxyBypassList
InternetGetConnectedStateEx
GetUrlCacheEntryInfoW
InternetCombineUrlA
InternetSetOptionA
advapi32
ReportEventA
CryptGetProvParam
RegEnumKeyW
LookupSecurityDescriptorPartsW
CryptGenKey
CryptSetProviderA
CryptImportKey
StartServiceW
CryptSetKeyParam
RegReplaceKeyW
CryptHashSessionKey
CryptEnumProvidersA
RegSetKeySecurity
RegDeleteValueW
CryptAcquireContextW
RegEnumKeyExW
CryptGenRandom
RegConnectRegistryW
LogonUserW
RegCloseKey
comdlg32
ChooseColorW
PrintDlgW
GetOpenFileNameA
GetFileTitleW
FindTextW
GetSaveFileNameA
gdi32
GetCurrentObject
GetRgnBox
CreateBitmap
GetGlyphOutline
FillPath
GetKerningPairs
StretchDIBits
EnumEnhMetaFile
GetTextExtentPointW
GetTextCharacterExtra
GetMetaFileA
ChoosePixelFormat
kernel32
EnumSystemLocalesA
GetProcessHeap
GetPrivateProfileIntW
GetSystemTimeAsFileTime
GetModuleFileNameA
SetHandleCount
CompareStringW
WriteFile
ExitProcess
SetEnvironmentVariableA
FreeLibrary
InterlockedIncrement
SetConsoleScreenBufferSize
Sleep
GetCommandLineA
TlsSetValue
LoadLibraryA
VirtualQuery
GetEnvironmentStringsW
GetStdHandle
RtlUnwind
GetOEMCP
HeapReAlloc
VirtualAlloc
GetNamedPipeHandleStateA
GetTimeFormatA
FreeEnvironmentStringsA
GetFileType
GetCurrentThreadId
UnhandledExceptionFilter
GetProcAddress
EnterCriticalSection
GetCurrentThread
IsValidLocale
GetDateFormatA
SetLastError
GetLastError
GetCurrencyFormatA
GetStartupInfoA
DeleteCriticalSection
IsValidCodePage
GetUserDefaultLCID
IsDebuggerPresent
GetACP
GetCurrentProcessId
InterlockedExchange
GetTickCount
CompareStringA
GetEnvironmentVariableW
GetEnvironmentStrings
GetExitCodeThread
GlobalAddAtomA
GetLocaleInfoA
TlsGetValue
HeapLock
GetStringTypeA
GetLocaleInfoW
LCMapStringA
SetConsoleCtrlHandler
GetStringTypeW
CreateSemaphoreA
GetCompressedFileSizeA
HeapFree
GetCPInfo
GetCurrentProcess
LocalShrink
QueryPerformanceCounter
GetTimeZoneInformation
WideCharToMultiByte
MultiByteToWideChar
WriteConsoleInputW
TlsAlloc
TerminateProcess
InitializeCriticalSection
GetProcessHeaps
lstrcpy
GetMailslotInfo
GetVersionExA
CreateWaitableTimerA
InterlockedDecrement
GetModuleHandleA
LCMapStringW
LeaveCriticalSection
GetTimeFormatW
GetProcAddress
HeapDestroy
HeapAlloc
VirtualFree
HeapCreate
FreeEnvironmentStringsW
TlsFree
SetUnhandledExceptionFilter
HeapSize
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ