Static task
static1
Behavioral task
behavioral1
Sample
09d536f4273e2f2293c0650b67bbe9d0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09d536f4273e2f2293c0650b67bbe9d0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
09d536f4273e2f2293c0650b67bbe9d0_NeikiAnalytics.exe
-
Size
212KB
-
MD5
09d536f4273e2f2293c0650b67bbe9d0
-
SHA1
d15a7256442e2e388d55a9fb0b5b4735c4254207
-
SHA256
1d17bada628e6dbba0d5a0d58c00befb611a6b1b453ca2d1ed5eee34b99e7f7b
-
SHA512
b89855a90471421937c3be7b21cc1e75aead128826cd532922b0427e20531b37c2f74f45ea7a2fd8567a51dc2d96348afc31bf69e9ffa2b6d8e746e33f94fb5f
-
SSDEEP
6144:yxNqLW6opBZMU/y/JEGjg+op2BSNCCr7/jU:sA6NBT/yEGjWwa7vU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d536f4273e2f2293c0650b67bbe9d0_NeikiAnalytics.exe
Files
-
09d536f4273e2f2293c0650b67bbe9d0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
cb466204f5c37666fe7d05c000308c29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SleepEx
GlobalFindAtomW
GetAtomNameW
GlobalGetAtomNameA
GetCalendarInfoW
RaiseException
Sleep
CreateDirectoryA
CreateFileA
SearchPathA
GetTempPathW
CreateDirectoryW
CreateNamedPipeA
CopyFileExA
lstrcmp
GetSystemDirectoryA
GetModuleHandleA
EndUpdateResourceW
GetStringTypeW
WriteFile
GetProcAddress
FreeLibrary
GetLocaleInfoW
FreeResource
FindAtomW
OpenMutexW
OpenSemaphoreA
IsValidCodePage
FileTimeToLocalFileTime
QueryPerformanceCounter
GetVersion
OpenSemaphoreW
user32
PeekMessageA
GetSysColor
GetKeyboardType
LoadCursorA
DialogBoxIndirectParamW
RemoveMenu
IsWindowEnabled
DialogBoxIndirectParamA
GetDlgItemTextA
GetCapture
AdjustWindowRect
SetCapture
CharNextW
ShowWindow
RegisterWindowMessageA
GetForegroundWindow
SendDlgItemMessageW
OffsetRect
GetDlgItem
LoadCursorW
UpdateWindow
LoadIconW
SetMenu
LoadBitmapA
EndMenu
CopyImage
ShowCursor
SetParent
MessageBoxIndirectW
WaitForInputIdle
RegisterClassExW
GetDC
InsertMenuW
EnableMenuItem
GetIconInfo
CheckRadioButton
FrameRect
SetWindowPos
GetMenuItemID
DialogBoxParamW
GetClassLongA
GetActiveWindow
GetMenuStringA
SetActiveWindow
FindWindowW
GetWindowRgn
gdi32
GetBitmapDimensionEx
MoveToEx
PolyBezier
GetTextExtentExPointW
ExtTextOutA
RealizePalette
StartDocA
GetEnhMetaFileBits
UpdateICMRegKeyA
GetRasterizerCaps
GetSystemPaletteUse
advapi32
RegReplaceKeyA
RegCreateKeyExW
RegFlushKey
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyA
RegCreateKeyExA
winmm
waveInStop
OpenDriver
waveOutGetErrorTextW
oledlg
OleUIUpdateLinksA
OleUIObjectPropertiesW
OleUIEditLinksW
OleUIEditLinksA
OleUIChangeSourceW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bqtZlw Size: 2KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.piDQ Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.XyHwD Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hJ Size: 2KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Yj Size: 512B - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VxXS Size: 1024B - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LadQl Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zvc Size: 2KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ