Static task
static1
Behavioral task
behavioral1
Sample
96b2207f7dca9756546b727db687bc30_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
96b2207f7dca9756546b727db687bc30_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
96b2207f7dca9756546b727db687bc30_NeikiAnalytics.exe
-
Size
353KB
-
MD5
96b2207f7dca9756546b727db687bc30
-
SHA1
aa4d1f803e6d51a108cd0ece0ce1bab960e3da83
-
SHA256
dc2b897e17272108cdfd68d73140b24722875ae3ac8d58d054baf6658fd75e83
-
SHA512
acee2d2f1a7a10de0154062cac89c6e1c2b2d869bbf87092e334c16173a60071f5df11fea83437eff2add1b3e2aaa8018989b7c2f933f5f78cadb41f3a96d1d7
-
SSDEEP
3072:bEHuVcqMIrEM/3ruhHpPKeqv1l/fnv+8UMBZJrX5pFcCjYvQd2a:bEHQcqMIb3ihHIeqtl/HHZvpFcta
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96b2207f7dca9756546b727db687bc30_NeikiAnalytics.exe
Files
-
96b2207f7dca9756546b727db687bc30_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
9b441001a5ca4ead583edeb006ea59dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
FindNextFileA
CreateDirectoryA
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
Sleep
GetTickCount
CreateFileA
WriteFile
CloseHandle
CreateMutexA
GetLastError
SetFileAttributesA
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ExitProcess
SetLastError
CreateProcessA
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
GetCurrentProcess
InterlockedDecrement
WideCharToMultiByte
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
ReadConsoleW
WriteConsoleW
SetStdHandle
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
SetFilePointer
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId
GetOEMCP
GetACP
IsValidCodePage
InterlockedIncrement
EncodePointer
DecodePointer
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
LocalFree
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
RtlUnwind
HeapAlloc
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetProcessHeap
GetFileType
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
FlushFileBuffers
user32
GetCursorPos
oleaut32
VariantClear
ws2_32
socket
gethostbyname
htons
connect
WSAStartup
closesocket
recv
send
WSACleanup
WSAGetLastError
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.htext Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE