Static task
static1
Behavioral task
behavioral1
Sample
09f23f4eb99962a561714f92e496ea68ad6611fb883a660e88bbe9544e52c130_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
09f23f4eb99962a561714f92e496ea68ad6611fb883a660e88bbe9544e52c130_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
09f23f4eb99962a561714f92e496ea68ad6611fb883a660e88bbe9544e52c130_NeikiAnalytics
-
Size
252KB
-
MD5
669613e3aa3665face1cedb90a7735b0
-
SHA1
ce9c77941687a4f9de8ae650b5f3a00f293286e3
-
SHA256
09f23f4eb99962a561714f92e496ea68ad6611fb883a660e88bbe9544e52c130
-
SHA512
5bafa7a82a8e86782d482ce3bb4de68d5b5de1ffd091e43fa95feea0af6c819489a0a71b652afd1e5f52c3e1209cbf41187256d445483bbeeebb529ae43f3d08
-
SSDEEP
3072:NL1rPrHqiqVdynN7WozvLDlcuwuq8BSZCCFtUejZ1WVv4lB3q9//gjPy:ZpqigdyBWoX5HaZxyAZ1WV2Zq9/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09f23f4eb99962a561714f92e496ea68ad6611fb883a660e88bbe9544e52c130_NeikiAnalytics
Files
-
09f23f4eb99962a561714f92e496ea68ad6611fb883a660e88bbe9544e52c130_NeikiAnalytics.exe windows:4 windows x86 arch:x86
c005183bb983dfac2053ee8b19a015b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
g3ctrlu
?RegRFontAfterCreate@CEXResMngr@@QAEPAVCRFont@@IVCString@@HIIIIVCSize@@@Z
?RegRFontAfterCreate@CEXResMngr@@QAEPAVCRFont@@VCString@@0HKKIIVCSize@@@Z
?GetZoom@CEXResMngr@@QAEMXZ
?RegRGripAfterCreate@CEXResMngr@@QAEPAVCRGrip@@VCString@@IIVCPoint@@HHHH@Z
?RegRImageAfterCreate@CEXResMngr@@QAEPAVCRImage@@VCString@@IIHHHH@Z
?RegRImageMapAfterCreate@CEXResMngr@@QAEPAVCRImageMap@@VCString@@IIHHHH@Z
?RegRImageAfterCreate@CEXResMngr@@QAEPAVCRImage@@VCString@@0IVCSize@@HH@Z
?FitToZoom@CEXButtonTheme@@UAEXM@Z
?Serialize@CEXButtonTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXButtonTheme@@UAEXXZ
??_7ITheme@@6B@
?GetColor@CEXResMngr@@QAEKI@Z
?GetFontSet@CEXResMngr@@QAEPAVCRFontSet@@I@Z
?RegTheme@CEXResMngr@@QAEHIIPAVITheme@@H@Z
?GetImage@CEXResMngr@@QAEPAVIImage@@I@Z
??0CEXButtonTheme@@QAE@XZ
??1CEXButtonTheme@@UAE@XZ
?FitToZoom@CEXComboBoxTheme@@UAEXM@Z
?Serialize@CEXComboBoxTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXComboBoxTheme@@UAEXXZ
??0CEXComboBoxTheme@@QAE@XZ
??1CEXComboBoxTheme@@UAE@XZ
?FitToZoom@CEXDialogTheme@@UAEXM@Z
?Serialize@CEXDialogTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXDialogTheme@@UAEXXZ
?GetTheme@CEXResMngr@@QAEPAVITheme@@I@Z
??0CEXDialogTheme@@QAE@XZ
??1CEXDialogTheme@@UAE@XZ
?FitToZoom@CEXEditTheme@@UAEXM@Z
?Serialize@CEXEditTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXEditTheme@@UAEXXZ
?GetFont@CEXResMngr@@QAEPAVCRFont@@I@Z
??0CEXEditTheme@@QAE@XZ
??1CEXEditTheme@@UAE@XZ
?FitToZoom@CEXFrameWndTheme@@UAEXM@Z
?Serialize@CEXFrameWndTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXFrameWndTheme@@UAEXXZ
??0CEXFrameWndTheme@@QAE@XZ
??1CEXFrameWndTheme@@UAE@XZ
?FitToZoom@CEXHeaderCtrlTheme@@UAEXM@Z
?Serialize@CEXHeaderCtrlTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXHeaderCtrlTheme@@UAEXXZ
?FitToZoom@CEXListCtrlTheme@@UAEXM@Z
?Serialize@CEXListCtrlTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXListCtrlTheme@@UAEXXZ
??0CEXListCtrlTheme@@QAE@XZ
??0CEXHeaderCtrlTheme@@QAE@XZ
??1CEXHeaderCtrlTheme@@UAE@XZ
??1CEXListCtrlTheme@@UAE@XZ
?FitToZoom@CEXProgressCtrlTheme@@UAEXM@Z
?Serialize@CEXProgressCtrlTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXProgressCtrlTheme@@UAEXXZ
??0CEXProgressCtrlTheme@@QAE@XZ
??1CEXProgressCtrlTheme@@UAE@XZ
?FitToZoom@CEXPropertyPageTheme@@UAEXM@Z
?Serialize@CEXPropertyPageTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXPropertyPageTheme@@UAEXXZ
??0CEXPropertyPageTheme@@QAE@XZ
??1CEXPropertyPageTheme@@UAE@XZ
?FitToZoom@CEXPropertySheetTheme@@UAEXM@Z
?Serialize@CEXPropertySheetTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?RegColor@CEXResMngr@@QAEHIK@Z
?FitToZoom@CEXPropertySheetExTheme@@UAEXM@Z
?Serialize@CEXPropertySheetExTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
??0CRFontSet@@QAE@XZ
??0CEXPropertySheetExTheme@@QAE@XZ
??0CEXPropertySheetTheme@@QAE@XZ
??1CEXPropertySheetTheme@@UAE@XZ
??1CEXPropertySheetExTheme@@UAE@XZ
?FitToZoom@CEXStaticTheme@@UAEXM@Z
?Serialize@CEXStaticTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXStaticTheme@@UAEXXZ
??0CEXStaticTheme@@QAE@XZ
??1CEXStaticTheme@@UAE@XZ
?FitToZoom@CEXStatusBarTheme@@UAEXM@Z
?Serialize@CEXStatusBarTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXStatusBarTheme@@UAEXXZ
??0CEXStatusBarTheme@@QAE@XZ
??1CEXStatusBarTheme@@UAE@XZ
?FitToZoom@CEXTabCtrlTheme@@UAEXM@Z
?Serialize@CEXTabCtrlTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXTabCtrlTheme@@UAEXXZ
??0CEXTabCtrlTheme@@QAE@XZ
??1CEXTabCtrlTheme@@UAE@XZ
?FitToZoom@CEXMultiSliderCtrlTheme@@UAEXM@Z
?Serialize@CEXMultiSliderCtrlTheme@@UAEXAAVCArchive@@PAVCEXResMngr@@@Z
?Empty@CEXMultiSliderCtrlTheme@@UAEXXZ
??0CEXMultiSliderCtrlTheme@@QAE@XZ
??1CEXMultiSliderCtrlTheme@@UAE@XZ
?DrawDialog@CEXDialog@@MAEXPAVCPaintDC@@@Z
?SetTheme@CEXDialog@@UAEXPAVITheme@@@Z
?SetTheme@CEXDialog@@UAEXPAVCEXDialogTheme@@@Z
?WindowProc@CEXDialog@@MAEJIIJ@Z
?GetRuntimeClass@CEXDialog@@UBEPAUCRuntimeClass@@XZ
??1CEXButton@@UAE@XZ
?SetTheme@CEXStatic@@QAEXPAVCEXStaticTheme@@@Z
?SetTheme@CEXButton@@QAEXPAVCEXButtonTheme@@@Z
??0CEXButton@@QAE@XZ
??0CEXStatic@@QAE@XZ
??0CEXDialog@@QAE@IPAVCWnd@@@Z
?DoDataExchange@CEXDialog@@MAEXPAVCDataExchange@@@Z
?messageMap@CEXDialog@@1UAFX_MSGMAP@@B
??0CEXProgressCtrl@@QAE@XZ
?SetTheme@CEXProgressCtrl@@QAEXPAVCEXProgressCtrlTheme@@@Z
?OnPaint@CEXDialog@@IAEXXZ
?GetClientRect@CEXDialog@@QBEXPAUtagRECT@@@Z
?OnDestroy@CEXDialog@@IAEXXZ
??1CEXEdit@@UAE@XZ
??1CEXMultiSliderCtrl@@UAE@XZ
??1CEXComboBox@@UAE@XZ
??0CEXEdit@@QAE@XZ
??0CEXMultiSliderCtrl@@QAE@XZ
??0CEXComboBox@@QAE@XZ
?SetPos@CEXMultiSliderCtrl@@QAEHNHH@Z
?SetValueOfSelGrip@CEXMultiSliderCtrl@@QAEHHNH@Z
?SetPreventCrossing@CEXMultiSliderCtrl@@QAEXH@Z
?AddSelGrip@CEXMultiSliderCtrl@@QAEHN@Z
?SetRange@CEXMultiSliderCtrl@@QAEXNNH@Z
?SetTheme@CEXMultiSliderCtrl@@QAEXPAVCEXMultiSliderCtrlTheme@@H@Z
?SetTheme@CEXEdit@@QAEXPAVITheme@@@Z
?SetTheme@CEXComboBox@@QAEXPAVCEXComboBoxTheme@@@Z
?GetPos@CEXMultiSliderCtrl@@QAEHAANH@Z
?SetResModuleNm@CEXResMngr@@QAEHVCString@@@Z
?SetZoom@CEXResMngr@@QAEXM@Z
??1CEXStatic@@UAE@XZ
??1CEXProgressCtrl@@UAE@XZ
??1CEXDialog@@UAE@XZ
??1CEXResMngr@@UAE@XZ
?GetFont@CEXResMngr@@QAEPAVCRFont@@VCString@@@Z
?RegFontSet@CEXResMngr@@QAEHVCString@@PAVCRFontSet@@@Z
?Empty@CEXPropertySheetExTheme@@UAEXXZ
?RegRFontSetAfterCreate@CEXResMngr@@QAEPBVCRFontSet@@IIIII@Z
?Empty@CEXPropertySheetTheme@@UAEXXZ
??0CEXResMngr@@QAE@XZ
dcmlib
uncompress
compress
filedownloaderu
?NewDownload@CXFileDownloader@@QAEHPAVCStringArray@@0VCString@@KK@Z
??1CXFileDownloader@@UAE@XZ
??0CXFileDownloader@@QAE@HHVCString@@@Z
mfc42u
ord5647
ord3611
ord3658
ord3122
ord3806
ord350
ord2385
ord1197
ord5706
ord2099
ord2836
ord668
ord2813
ord356
ord2762
ord6640
ord2756
ord6921
ord5446
ord5436
ord6379
ord6390
ord4667
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3825
ord3826
ord3820
ord3074
ord4075
ord4616
ord4418
ord3733
ord561
ord815
ord641
ord2506
ord1229
ord1165
ord2613
ord1131
ord925
ord5679
ord2910
ord5261
ord4370
ord4847
ord4992
ord6048
ord4073
ord1767
ord4401
ord5237
ord2377
ord5157
ord4347
ord5276
ord3793
ord4831
ord4435
ord2640
ord2047
ord6372
ord3744
ord5059
ord1720
ord5257
ord2438
ord2116
ord5273
ord4621
ord4419
ord2294
ord1143
ord2362
ord6330
ord4155
ord2858
ord4704
ord2371
ord755
ord470
ord6211
ord6195
ord2289
ord2355
ord2293
ord2634
ord3087
ord4688
ord3871
ord3579
ord772
ord711
ord802
ord1105
ord500
ord413
ord542
ord543
ord803
ord1972
ord6565
ord3176
ord4053
ord2773
ord5597
ord6303
ord4162
ord521
ord5856
ord1941
ord567
ord818
ord6051
ord1768
ord5286
ord2144
ord1230
ord3805
ord4215
ord2576
ord3649
ord2430
ord1637
ord4270
ord920
ord6456
ord1172
ord6370
ord1264
ord1594
ord6654
ord6874
ord354
ord5180
ord1971
ord665
ord927
ord858
ord924
ord922
ord6139
ord541
ord2806
ord535
ord2810
ord4124
ord4273
ord5929
ord538
ord2914
ord5568
ord823
ord2606
ord861
ord942
ord940
ord825
ord540
ord859
ord800
ord1569
msvcrt
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
??1type_info@@UAE@XZ
_exit
_ultow
_vsnwprintf
_ftol
_purecall
_waccess
wcsncpy
_wcsicmp
_CxxThrowException
wcscpy
wcstok
?terminate@@YAXXZ
_controlfp
_XcptFilter
__CxxFrameHandler
swprintf
wcslen
wcscmp
_wtoi
kernel32
FormatMessageW
LocalFree
CreateDirectoryW
GetCurrentDirectoryW
lstrcpyW
InterlockedDecrement
Sleep
CloseHandle
SetCurrentDirectoryW
CreateMutexW
GetModuleFileNameW
CreateEventW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ResumeThread
SetEvent
SuspendThread
WaitForSingleObject
WaitForMultipleObjects
RemoveDirectoryW
DeleteFileW
GetDiskFreeSpaceExW
GetDriveTypeW
GetVersion
GetPrivateProfileStringW
InterlockedIncrement
LocalAlloc
lstrlenW
SetFileAttributesW
GetFileAttributesW
GetModuleHandleW
GetStartupInfoW
MultiByteToWideChar
lstrlenA
GetLastError
OutputDebugStringW
user32
GetCursorPos
EnableMenuItem
SetForegroundWindow
GetDlgItem
EnableWindow
GetWindowLongW
SetWindowLongW
SendMessageW
FindWindowExW
GetWindowRect
GetClientRect
TrackPopupMenu
GetMenuItemID
LoadMenuW
ScreenToClient
SetMenuDefaultItem
KillTimer
RegisterWindowMessageW
PostMessageW
PostQuitMessage
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuW
SetTimer
LoadIconW
GetClassInfoW
wsprintfW
MoveWindow
GetSubMenu
advapi32
AllocateAndInitializeSid
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
SetFileSecurityW
shell32
Shell_NotifyIconW
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
ole32
CoCreateInstance
CoCreateGuid
CoInitialize
CoUninitialize
OleRun
oleaut32
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
SafeArrayGetUBound
VariantClear
VariantInit
SysFreeString
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
GetErrorInfo
CreateErrorInfo
Sections
.text Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ