Static task
static1
Behavioral task
behavioral1
Sample
dcfcff7efbdd1462feda3b56781e9cd0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dcfcff7efbdd1462feda3b56781e9cd0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
dcfcff7efbdd1462feda3b56781e9cd0_NeikiAnalytics
-
Size
1.4MB
-
MD5
dcfcff7efbdd1462feda3b56781e9cd0
-
SHA1
597ba0cdb4b083f2bfb3e2bab9abd927ca68b594
-
SHA256
3751e215fbaeda44eae806765b02c4e1b83ef38515dc940ba24d4e4440cc1df4
-
SHA512
f1cb063412e4c3b630c6cc3282abbb2e87b3467ce56dbb1766ae2801dc1ef4914f47c2d8b6e310555ecb875c57be01ce71c6106faf93efb1d60fb5f7ebcfb238
-
SSDEEP
24576:QDhrsGzgg62H55f6gjN3XpF0QNiXDzDK5rlMmEHk6vXjykttJ/rMl/:MXhuQNizyJlqkOTykttg/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcfcff7efbdd1462feda3b56781e9cd0_NeikiAnalytics
Files
-
dcfcff7efbdd1462feda3b56781e9cd0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
33d504e01bb1c85e62131a976642d7e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileTime
SetErrorMode
RtlUnwind
GetTimeZoneInformation
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
CreateThread
ExitThread
TerminateProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DeleteCriticalSection
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTempPathA
GetSystemTime
GetTickCount
CopyFileA
GlobalFree
GlobalReAlloc
GlobalAlloc
FreeLibrary
LoadLibraryA
GlobalSize
Sleep
HeapAlloc
GetProcessHeap
HeapFree
GlobalUnlock
GlobalLock
GetVersionExA
GetSystemDirectoryA
GetProcAddress
CloseHandle
CreateFileA
QueryDosDeviceA
GetDriveTypeA
GetLogicalDrives
DeviceIoControl
ResetEvent
CreateEventA
WaitForSingleObject
GetLastError
lstrcmpiA
TlsAlloc
InitializeCriticalSection
GlobalFlags
GetProcessVersion
ReleaseMutex
CreateMutexA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcmpA
GetCurrentThread
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
SetEndOfFile
UnlockFile
InterlockedExchange
GetProfileStringA
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
MulDiv
FindNextFileA
FindFirstFileA
SetLastError
FindClose
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
VirtualProtect
GetCurrentDirectoryA
SetCurrentDirectoryA
IsBadWritePtr
GetVersion
LocalAlloc
LocalFree
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
FormatMessageA
SizeofResource
WriteFile
GetSystemDefaultLangID
FindResourceA
LoadResource
LockResource
WideCharToMultiByte
MultiByteToWideChar
GetLocaleInfoA
lstrcpynA
GlobalMemoryStatus
OpenProcess
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
GetFileSize
ReadFile
SetFilePointer
QueryPerformanceFrequency
QueryPerformanceCounter
GetStringTypeA
user32
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckRadioButton
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
GetClassInfoA
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
ShowWindow
GetCapture
GetActiveWindow
SetActiveWindow
SetFocus
GetDlgItem
IsWindowEnabled
GetClassNameA
WinHelpA
GetKeyState
PostMessageA
IsChild
GetDesktopWindow
GetMessageA
IsWindow
MessageBeep
DestroyCursor
SystemParametersInfoA
SetRect
AdjustWindowRect
LoadStringA
GetSysColorBrush
CopyRect
GetWindow
IsMenu
ScreenToClient
FillRect
GetFocus
DrawEdge
RegisterWindowMessageA
GrayStringA
DrawTextA
TabbedTextOutA
RemoveMenu
SetCursor
UpdateWindow
RedrawWindow
MsgWaitForMultipleObjects
DispatchMessageA
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
PeekMessageA
TranslateMessage
WindowFromPoint
DestroyMenu
SetWindowContextHelpId
PostQuitMessage
CharUpperA
EndPaint
RemovePropA
BeginPaint
LoadImageA
MessageBoxA
LoadMenuA
GetCursorPos
TrackPopupMenu
GetParent
wsprintfA
GetSysColor
DrawStateA
EnableMenuItem
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
GetMenu
GetSubMenu
GetMenuItemCount
GetMenuStringA
GetMenuItemID
ModifyMenuA
LoadBitmapA
LoadCursorA
ClientToScreen
ReleaseCapture
SetWindowPos
SetCapture
PtInRect
GetPropA
SetPropA
SetWindowLongA
GetWindowLongA
GetSystemMetrics
CallWindowProcA
GetWindowDC
DrawFrameControl
InflateRect
OffsetRect
DrawIconEx
GetWindowRect
IsRectEmpty
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetDC
GetClientRect
ReleaseDC
EnableWindow
SetTimer
KillTimer
InvalidateRect
LoadIconA
SendMessageA
ValidateRect
wvsprintfA
CopyIcon
HideCaret
UnregisterClassA
GetAsyncKeyState
gdi32
Ellipse
SetPixel
SetTextColor
LineTo
MoveToEx
Polygon
CreateFontIndirectA
GetStockObject
DeleteDC
GetCurrentObject
GetBkColor
PtVisible
RectVisible
ExtTextOutA
Escape
CreateRectRgn
CreateFontA
GetTextFaceA
GetClipBox
PatBlt
CreateBitmap
SaveDC
RestoreDC
SelectPalette
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetBkColor
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
GetMapMode
DPtoLP
GetTextColor
LPtoDP
SetTextAlign
TextOutA
GetTextExtentPoint32A
CreatePen
CreateSolidBrush
Rectangle
SetBkMode
CreateRectRgnIndirect
CombineRgn
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
RealizePalette
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetObjectA
GetBitmapBits
GetTextExtentPointA
SetWindowExtEx
CreateDIBitmap
DeleteObject
comdlg32
ChooseColorA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
shell32
SHGetFileInfoA
ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
comctl32
ImageList_DrawIndirect
ImageList_Create
ImageList_Destroy
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ImageList_GetImageCount
ImageList_Remove
ord17
ImageList_GetImageInfo
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleFlushClipboard
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitializeEx
CoCreateInstance
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
Sections
.text Size: 728KB - Virtual size: 726KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 444KB - Virtual size: 442KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ