Static task
static1
Behavioral task
behavioral1
Sample
0089d4071e6436e72951c5aec6869150_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0089d4071e6436e72951c5aec6869150_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0089d4071e6436e72951c5aec6869150_NeikiAnalytics.exe
-
Size
30KB
-
MD5
0089d4071e6436e72951c5aec6869150
-
SHA1
71df5a419cf436548553b1c8fdbb97c59638a9ba
-
SHA256
6b219021d9b13abc9a19c44b4c988dbdeab35ff3a386b7ae315fa9c1806f7816
-
SHA512
bcb92eeee22171e5542e0a582a10a62e17f366b02162c8ec4103a1b6da33937f2659ccf5e69b4be35df26c9e89909fd2a396ad1f020ccbf6361b63d5d1748737
-
SSDEEP
768:V+s+PX+4T57dTcf2w/hfBg95S2G/YNyln0R:GT57dIfJo9Uo4+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0089d4071e6436e72951c5aec6869150_NeikiAnalytics.exe
Files
-
0089d4071e6436e72951c5aec6869150_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
7e24060271c61a34784c42ebb29ed915
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
kernel32
GlobalFree
GetCurrentProcess
GetDiskFreeSpaceA
GetDriveTypeA
GetFileSize
GetLastError
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
CreateToolhelp32Snapshot
lstrlenW
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
_lwrite
_lread
_lopen
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetComputerNameA
_lcreat
_lclose
WriteFile
WideCharToMultiByte
UnmapViewOfFile
Sleep
ReadFile
Process32Next
Process32First
OpenProcess
MultiByteToWideChar
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalMemoryStatus
GetLocalTime
GlobalAlloc
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetTempPathA
GetSystemDirectoryA
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
GetModuleFileNameA
GetLogicalDrives
GetLocaleInfoA
GetCurrentDirectoryA
user32
GetDC
wsprintfA
ReleaseDC
oleaut32
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayUnaccessData
SysAllocString
SysFreeString
advapi32
LookupPrivilegeValueA
GetUserNameA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegCreateKeyA
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
shlwapi
StrRChrA
StrStrIA
StrChrA
StrCmpNA
shell32
ShellExecuteA
wsock32
socket
send
recv
gethostname
closesocket
WSAStartup
ws2_32
WSAIoctl
rasapi32
RasGetEntryPropertiesA
RasGetEntryDialParamsA
RasEnumEntriesA
gdi32
GetDeviceCaps
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE