?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B
Behavioral task
behavioral1
Sample
84200caa91b5bb0c405cc5504585c930_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
84200caa91b5bb0c405cc5504585c930_NeikiAnalytics
-
Size
5.4MB
-
MD5
84200caa91b5bb0c405cc5504585c930
-
SHA1
a891551a2e698ef3cd58b0475885fd5ac0112081
-
SHA256
3bfe8db7e6aaf4286bcf405e146a65d73f7b1559bc4fe244c70fc3e90e21b3dd
-
SHA512
ad402ffa47fe6947a510295deb8d335f89e12f9a688e358063845e2f6f02232a4c87c71b1e2d5bacef2e69a831cb0787f540766a5a473c7dea88fab490879e78
-
SSDEEP
98304:jg1glG4ajy2toG3AMzo3kDS0TDVQqKiuW3Am1HF3F/DudcUD7/BQevEd5FIFfQUw:j84H04BigCD2cc2954vWxbGoJJ
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84200caa91b5bb0c405cc5504585c930_NeikiAnalytics
Files
-
84200caa91b5bb0c405cc5504585c930_NeikiAnalytics.exe windows:4 windows x86 arch:x86
b81079f03aee7551cd3bdd724287ead5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord807
msvcrt
__getmainargs
kernel32
GlobalSize
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
GetSystemMetrics
MessageBoxA
gdi32
RoundRect
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
comctl32
ImageList_GetImageInfo
ole32
CLSIDFromString
oleaut32
SysAllocStringByteLen
urlmon
URLDownloadToFileA
msvcp60
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
winmm
PlaySoundA
wininet
DeleteUrlCacheEntry
shlwapi
SHDeleteKeyA
ws2_32
gethostbyname
rpcrt4
RpcStringFreeA
imagehlp
MakeSureDirectoryPathExists
dinput8
DirectInput8Create
msimg32
GradientFill
uxtheme
SetThemeAppProperties
comdlg32
GetOpenFileNameA
olepro32
ord251
Exports
Exports
Sections
.text Size: 744KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 440KB - Virtual size: 438KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ