Static task
static1
Behavioral task
behavioral1
Sample
82bf7d23d65f95fcc021454438f33bf0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
82bf7d23d65f95fcc021454438f33bf0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
82bf7d23d65f95fcc021454438f33bf0_NeikiAnalytics.exe
-
Size
524KB
-
MD5
82bf7d23d65f95fcc021454438f33bf0
-
SHA1
fab2e4eedc5f4b86286320888dd4e14c83047b04
-
SHA256
202ff6dc2b37fa5a977c68f4d0c49e43fa2d50381c5d1b9ffb655d5c959cf75d
-
SHA512
5314d0c9d4b1c199e0604a4e1bc682fb97b2fe340477bda16af68eede2a7b08a50f94ae3f696fef2217cacfcd4fbec3e547fea961feb4ad860fbe05817c33d22
-
SSDEEP
6144:ffQgpx4uwpA7XGRQTX8HRQCfvX/MGC3OcmulfiZLjd3PtYMDG:ffQuwpKGRQD8xQCfvvzC3wulf8lG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82bf7d23d65f95fcc021454438f33bf0_NeikiAnalytics.exe
Files
-
82bf7d23d65f95fcc021454438f33bf0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
c67471333ac07953085e1e225d5d2ce4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
kernel32
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
Sleep
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
GetStringTypeA
GetStringTypeW
CreateFileA
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetVersionExW
GetVersion
GetStdHandle
lstrlenA
GetCPInfo
LockResource
LoadResource
FindResourceW
lstrcmpiW
lstrlenW
GetModuleFileNameW
OutputDebugStringW
lstrcpyW
GetProcAddress
LoadLibraryW
FreeLibrary
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesW
lstrcpynW
GetTempFileNameW
GetFullPathNameW
SetFileTime
GetFileTime
GetDiskFreeSpaceW
GetLastError
GetModuleHandleA
GlobalFree
GetModuleHandleW
InterlockedExchange
GetProfileStringA
GlobalAddAtomA
FindResourceA
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
HeapReAlloc
HeapSize
TerminateProcess
RaiseException
FindNextFileA
FindFirstFileA
IsBadReadPtr
HeapAlloc
HeapFree
RtlUnwind
ExitProcess
GetStartupInfoW
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
FindResourceExW
SizeofResource
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetProcessVersion
GetShortPathNameW
GetThreadLocale
GetStringTypeExW
GetVolumeInformationW
FindFirstFileW
FindClose
DeleteFileW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalReAlloc
GlobalSize
GetCurrentDirectoryW
lstrcmpiA
GetCurrentThread
lstrcmpW
lstrcmpA
FormatMessageW
GlobalDeleteAtom
LocalFree
CloseHandle
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalGetAtomNameW
MulDiv
SetLastError
LoadLibraryA
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
user32
CopyAcceleratorTableW
GetNextDlgGroupItem
MessageBeep
SetParent
PostThreadMessageW
WindowFromPoint
UnionRect
IsZoomed
IsRectEmpty
FindWindowW
GetMessageW
TranslateMessage
ValidateRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
SetCursor
TranslateAcceleratorW
LoadAcceleratorsW
SetRectEmpty
InflateRect
EndPaint
BeginPaint
GetWindowDC
MoveWindow
SetWindowTextW
IsDialogMessageW
EndDialog
CreateDialogIndirectParamW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
PeekMessageW
DispatchMessageW
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpW
CharNextW
GetClassInfoW
RegisterClassW
TrackPopupMenu
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
GetKeyState
DefWindowProcW
DestroyWindow
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageW
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
MapDialogRect
DestroyCursor
PostMessageW
GetActiveWindow
SetActiveWindow
GetFocus
SetFocus
IsWindowEnabled
GetParent
IsWindowVisible
RedrawWindow
EnumClipboardFormats
GetClipboardData
RegisterClipboardFormatW
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetMenu
UpdateWindow
ScreenToClient
DrawFrameControl
EqualRect
GetMenu
AdjustWindowRect
SetWindowPos
GetPropW
CallWindowProcW
BeginDeferWindowPos
LockWindowUpdate
GetDCEx
GetClassNameW
CharUpperW
LoadStringW
SetWindowContextHelpId
ShowOwnedPopups
wsprintfW
PostQuitMessage
MapWindowPoints
DeferWindowPos
EndDeferWindowPos
IsWindow
GetDlgItem
SetWindowLongW
RemovePropW
GetClientRect
SetPropW
GetWindowLongW
IsMenu
GetCursorPos
LoadCursorW
SendMessageW
MessageBoxW
GetSubMenu
DeleteMenu
GetMenuStringW
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
GrayStringW
LoadBitmapW
DrawTextW
TabbedTextOutW
GetSysColorBrush
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuW
GetMenuItemCount
InsertMenuW
AppendMenuW
GetSystemMetrics
GetDesktopWindow
GetDC
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoW
GetSysColor
CopyRect
FillRect
ShowWindow
SetCursorPos
DrawEdge
SetRect
GetMenuItemInfoW
ClientToScreen
SetMenuDefaultItem
GetCapture
ReleaseCapture
SetCapture
PtInRect
SetTimer
KillTimer
GetAsyncKeyState
EnableWindow
GetWindowRect
InvalidateRect
IsChild
gdi32
RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SaveDC
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
StretchDIBits
GetCharWidthW
CreateFontW
LPtoDP
GetTextMetricsW
EnumFontFamiliesExW
GetTextColor
GetBkColor
ExtTextOutA
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
PatBlt
Escape
ExtTextOutW
TextOutW
GetObjectW
GetPixel
SetPixel
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
RectVisible
PtVisible
Ellipse
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectW
CreateSolidBrush
CreatePen
GetBkMode
GetTextExtentPointA
CreateDIBitmap
GetDeviceCaps
comdlg32
CommDlgExtendedError
GetFileTitleW
GetOpenFileNameW
PrintDlgW
ChooseColorW
GetSaveFileNameW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegCloseKey
RegOpenKeyExW
SetFileSecurityW
GetFileSecurityW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegCreateKeyW
RegSetValueW
RegQueryValueExW
shell32
SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ExtractIconW
comctl32
ImageList_GetIcon
ImageList_AddMasked
ImageList_Draw
ImageList_ReplaceIcon
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ord17
ImageList_Destroy
ImageList_Create
ImageList_GetImageCount
oledlg
OleUIBusyW
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
olepro32
ord253
oleaut32
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ