Static task
static1
Behavioral task
behavioral1
Sample
80fd32738bdca85f7bf2baba0250b360_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
80fd32738bdca85f7bf2baba0250b360_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
80fd32738bdca85f7bf2baba0250b360_NeikiAnalytics.exe
-
Size
16KB
-
MD5
80fd32738bdca85f7bf2baba0250b360
-
SHA1
c70ab0e08f8a0f18f014468b9040219d6b67ff51
-
SHA256
8a17a79e3f50ea7b8d4c6b6d40137cfd7900d4583226092b5992a177220456de
-
SHA512
92523f5c79ba60c5ee7f51dc817025b56404c20f5154bc872536422ea06505da37a0f7fb63119b9205b36cd1bfacf4004466402e4bdcbddff6a826c5f4d7297a
-
SSDEEP
384:r1DrHwyM4NybxwjwiCa4RwN1rt9qjqTRg7as2:r1DrHwKNybxwjwiCant9dTR9s2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80fd32738bdca85f7bf2baba0250b360_NeikiAnalytics.exe
Files
-
80fd32738bdca85f7bf2baba0250b360_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
db5cb390eaeee6f72d5806eae83e233d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hiip
HIIP_M_TagGetLong
HIIP_M_SetErrorCode
HIIP_M_SetVaCommandReturn
HIIP_M_TagGetStringPtr
HIIP_M_FreeStringPtr
HIIP_M_BClose
HIIP_M_BOpenFileXPPath
HIIP_M_GetXPPathName
HIIP_M_SetErrorString
HIIP_M_RemoveFile
HIIP_M_SetVaModuleTags
HIIP_M_ShellMain
HIIP_M_SendImageDataMaxSize
HIIP_M_SendImageData
HIIP_H_CreatePaletteData
HIIP_M_SetVaImageInfo
HIIP_H_FreePaletteData
HIIP_M_RetrieveXPPath
HIIP_M_IsEqualXPPath
HIIP_M_FreeXPPath
ercore
AllocMemory
FreeMemory
msvcr71
_onexit
_controlfp
_purecall
??3@YAXPAX@Z
sscanf
strchr
__CxxFrameHandler
strncpy
??2@YAPAXI@Z
isspace
_stricmp
atol
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
__dllonexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
strtok
avomftoolkit_mc
omfiMobGetNumTracks
omfiMobGetMobID
omfiGetNextMob
omfmReadDataSamples
omfmGotoFrameNumber
omfiMobFindSource
omfiMobGetNextTrack
omfiTrackGetInfo
omfiComponentGetInfo
omfiIsPictureKind
omfmMediaOpen
omfmGetVideoInfo
omfmGetSampleCount
omfmGetVideoInfoArray
omfmSetVideoMemFormat
omfmGotoShortFrameNumber
omfmReadRawData
omfiIteratorAlloc
omfiMobGetNextSlot
omfiMobSlotGetInfo
omfiIsASequence
omfiSequenceGetInfo
omfsTruncInt64toUInt32
omfiIteratorDispose
omfmMediaClose
omfsCloseFile
omfsOpenFile
omfsGetErrorString
omfsEndSession
omfsBeginSession
omfmInit
omfCodecAvJPED
omfmRegisterCodec
omfCodecAvidJFIF
omfiMobGetNumSlots
kernel32
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE