Static task
static1
Behavioral task
behavioral1
Sample
39172eb6b3a3313964d3950619acd460bcccd348b72d8ba90a239aa703d568bf_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
39172eb6b3a3313964d3950619acd460bcccd348b72d8ba90a239aa703d568bf_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
39172eb6b3a3313964d3950619acd460bcccd348b72d8ba90a239aa703d568bf_NeikiAnalytics
-
Size
1.4MB
-
MD5
2b38ea559b84bd20642256ce46504900
-
SHA1
9ff5f6d90419dd2b578274b10e6265f27c810d51
-
SHA256
39172eb6b3a3313964d3950619acd460bcccd348b72d8ba90a239aa703d568bf
-
SHA512
571c981dbdb76aa11a696b9b4df88fae6e91bda84023dc9fff01ae867d96dd21f7e847c10d802716482a115640d6ea408f9a63d603a7297ba1a5caa28999f2a1
-
SSDEEP
24576:A4u0Ms8RU6O4ibDZEi6N/TSSbXootSRb1OKzR91Jy+CiTkbhZP/R:VzkbC2i4rfObVR5TKh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39172eb6b3a3313964d3950619acd460bcccd348b72d8ba90a239aa703d568bf_NeikiAnalytics
Files
-
39172eb6b3a3313964d3950619acd460bcccd348b72d8ba90a239aa703d568bf_NeikiAnalytics.exe windows:4 windows x86 arch:x86
2c9f8901d52451eb538abfd081c8a493
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
WaitForSingleObject
CreateProcessA
WriteFile
DeleteFileA
GetTempFileNameA
GetTempPathA
ReadFile
SetFilePointer
GetFileSize
GetLastError
CreateFileA
GetModuleFileNameA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
CloseHandle
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
GetFileType
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
user32
RegisterClassExA
CreateWindowExA
ShowWindow
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
DestroyWindow
PostQuitMessage
DefWindowProcA
LoadStringA
MessageBoxA
wsprintfA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ