Static task
static1
Behavioral task
behavioral1
Sample
6073248b07e636fa0a2a469eb4e91910_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
6073248b07e636fa0a2a469eb4e91910_NeikiAnalytics.exe
-
Size
232KB
-
MD5
6073248b07e636fa0a2a469eb4e91910
-
SHA1
a3150a1cc10fbb045e80b0337ef66db6fc37546a
-
SHA256
7a8ccbe3ac4271a4257401fc350282967ba760f0c46120c2129927858d26ee0d
-
SHA512
e84be527f3b137f8bff59f172ba8646d34a105f0103f7cdb35d50741bd3f13b50140a7d0110b1dcd99ae8186029be3bc0d8352a9a8e85b7322c29dc71403e223
-
SSDEEP
3072:4S2BNz4k2a+RvXp5ApGbpV4kHs2vh6DfSLGS5KTl9242/jismMguU:SFRKLGS5UIritM5U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6073248b07e636fa0a2a469eb4e91910_NeikiAnalytics.exe
Files
-
6073248b07e636fa0a2a469eb4e91910_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
610cc130aaaa220345df89231335738d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
version
VerInstallFileA
kernel32
GetModuleHandleA
GetStartupInfoA
ExitProcess
AddAtomA
lstrcpyA
GetCommandLineA
OpenEventA
FindResourceA
FindResourceExA
SetErrorMode
LocalFree
SetEvent
LoadResource
CreateFileA
LockResource
RemoveDirectoryA
GetTempPathA
WaitForSingleObject
GetShortPathNameA
CreateDirectoryA
lstrcpynA
lstrcatA
GetLastError
GetFileAttributesA
SetFileAttributesA
GlobalLock
GlobalAlloc
GetAtomNameA
DeleteFileA
GetPrivateProfileStringA
GetUserDefaultLangID
GlobalUnlock
GlobalFree
GetModuleFileNameA
RtlUnwind
Sleep
CloseHandle
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileIntA
GetTempFileNameA
FormatMessageA
CreateProcessA
CopyFileA
user32
EndPaint
BeginPaint
CreateDialogParamA
MessageBoxA
EndDialog
GetDlgItem
SendMessageA
GetWindowLongA
LoadImageA
DestroyWindow
CreateDialogIndirectParamA
SetDlgItemTextA
GetDesktopWindow
GetClientRect
MoveWindow
CharNextA
CharUpperA
ReleaseDC
SetWindowLongA
GetDC
DialogBoxIndirectParamA
wsprintfA
CharLowerA
GetWindowRect
gdi32
BitBlt
UnrealizeObject
DeleteDC
GetObjectA
GetDeviceCaps
CreateHalftonePalette
CreatePalette
GetSystemPaletteEntries
CreateCompatibleDC
SelectPalette
GetDIBColorTable
RealizePalette
SelectObject
advapi32
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
ole32
CoInitialize
CoFreeAllLibraries
CoUninitialize
CoCreateInstance
oleaut32
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
SafeArrayGetElement
SysStringLen
SafeArrayGetLBound
SafeArrayGetUBound
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE