Static task
static1
Behavioral task
behavioral1
Sample
32efeb0c85aa8fa7d1032684d2672800_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
32efeb0c85aa8fa7d1032684d2672800_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
32efeb0c85aa8fa7d1032684d2672800_NeikiAnalytics
-
Size
274KB
-
MD5
32efeb0c85aa8fa7d1032684d2672800
-
SHA1
e70ee32c40c619272da49d431fa23fdd76f10c63
-
SHA256
4ce69195178cc4a22ccbd8a7f87ab69061c651d0ddde3b50ca1c2e9a254ae8af
-
SHA512
af39ccf8295b7129f08447a4ead3a19e01ae7498ab0b41e65a108949a8a1b7ccc4ca6d20457663a9d0f04606fc507a4dcf27e1d5e7af2000713e914a0cd20431
-
SSDEEP
6144:qvH24A/K4suesol8pUwrIKmVv7dtxPJnrwXmsHllcnR7o6LWjDaU:qvtt8prrIKmVLuXFQVSDa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32efeb0c85aa8fa7d1032684d2672800_NeikiAnalytics
Files
-
32efeb0c85aa8fa7d1032684d2672800_NeikiAnalytics.exe windows:4 windows x86 arch:x86
114986a904a75006d40cd852da8ffbca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ReplaceTextW
PrintDlgA
GetSaveFileNameW
LoadAlterBitmap
ChooseColorW
ChooseFontA
shell32
FindExecutableA
SHGetPathFromIDListW
SHUpdateRecycleBinIcon
SHChangeNotify
ExtractIconExA
SHInvokePrinterCommandA
ExtractAssociatedIconA
SHFileOperationW
SHGetMalloc
SheChangeDirA
ShellExecuteEx
CommandLineToArgvW
DragQueryFile
ShellExecuteExW
SheSetCurDrive
advapi32
CryptGetProvParam
RegSetValueExA
CryptVerifySignatureW
CryptExportKey
LookupPrivilegeDisplayNameA
CryptSetProviderW
CryptDeriveKey
RegCreateKeyExW
RegDeleteKeyA
user32
GetMenuItemInfoW
TranslateMessage
RegisterWindowMessageA
GetWindowLongW
SetMenuItemInfoA
DefFrameProcW
CreateWindowStationA
PostThreadMessageA
DdeUninitialize
LoadCursorFromFileW
IsWindowEnabled
GetCapture
ModifyMenuW
CharNextExA
OpenClipboard
GetWindowTextLengthA
PostThreadMessageW
kernel32
VirtualQuery
ExitProcess
OpenMutexA
InterlockedExchange
GetCalendarInfoA
TlsGetValue
FreeResource
MultiByteToWideChar
GetTempFileNameW
HeapCreate
WideCharToMultiByte
SetConsoleCtrlHandler
FreeEnvironmentStringsW
FlushViewOfFile
RtlFillMemory
EnumDateFormatsExW
MapViewOfFileEx
VirtualFree
CompareStringW
SetHandleCount
GetFileType
GetLocaleInfoW
GetStringTypeA
UnhandledExceptionFilter
GetTimeZoneInformation
HeapFree
GetProcessHeap
CreateDirectoryExW
FreeEnvironmentStringsA
TlsSetValue
GetCurrentThread
GetCurrentProcessId
RtlUnwind
HeapAlloc
GetSystemTimeAsFileTime
OpenMutexW
CreateProcessW
SetLastError
GetACP
EnterCriticalSection
InterlockedIncrement
HeapSize
GetDateFormatA
IsValidLocale
SetUnhandledExceptionFilter
DeleteCriticalSection
FreeLibrary
Sleep
HeapDestroy
TlsAlloc
GetCPInfo
GetModuleFileNameA
GetPrivateProfileSectionNamesA
LCMapStringA
InitializeCriticalSection
CompareStringA
GetStringTypeW
SetEnvironmentVariableA
GetEnvironmentStrings
IsValidCodePage
GetStdHandle
HeapReAlloc
GetTimeFormatA
InterlockedDecrement
GetEnvironmentStringsW
GetTickCount
EnumSystemLocalesA
GetStartupInfoA
VirtualAlloc
TerminateProcess
GetProcessAffinityMask
GetVersionExA
GetModuleHandleA
TlsFree
GetPrivateProfileStringW
GetCurrentProcess
GetUserDefaultLCID
WriteConsoleOutputW
GetCurrentThreadId
GetCommandLineA
GetProcAddress
LCMapStringW
LeaveCriticalSection
GetLocaleInfoA
LoadLibraryA
GetVersion
FileTimeToSystemTime
IsDebuggerPresent
WriteFile
GetEnvironmentVariableW
GetDriveTypeA
GetLastError
SetTimeZoneInformation
QueryPerformanceCounter
GetOEMCP
Sections
.text Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ