Static task
static1
Behavioral task
behavioral1
Sample
7eb81cb4fb372159953aa022553174c0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7eb81cb4fb372159953aa022553174c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
7eb81cb4fb372159953aa022553174c0_NeikiAnalytics.exe
-
Size
260KB
-
MD5
7eb81cb4fb372159953aa022553174c0
-
SHA1
479023c7955fbcf503aabb3cadb297e9f82a78fd
-
SHA256
8d665f5d662d18f60b4bbab48bf66d8c53dbd383e6d6a2f6479b4420ebc867fd
-
SHA512
7e9173ce519be55c0e80220bb60212fa71e03d1df5ee25e1cab9958611b8d22f7e0c259ea918c06cb320339e359c69d05fa0e281c01477daffa5b56b8d2b2a14
-
SSDEEP
3072:XaLCqwSCB/UFph1xIMkVBt8d+2NDSNR9qjemkYmoSeJP6z4EqQA:XaLRCB8jtYbl4W90kVy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7eb81cb4fb372159953aa022553174c0_NeikiAnalytics.exe
Files
-
7eb81cb4fb372159953aa022553174c0_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
8220cdc9429f0cb1ebc91d4c039aeea4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimes
lstrlenW
SetThreadPriority
GetTempPathW
SetTapePosition
GetStartupInfoA
GetProcAddress
IsValidCodePage
LoadLibraryA
SetConsoleCursorInfo
CancelTimerQueueTimer
CreateMailslotA
GetStringTypeW
VirtualProtect
GetVersion
SetFileTime
CloseHandle
CreateFileA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
LockFile
InterlockedCompareExchange
SetConsoleActiveScreenBuffer
FindFirstChangeNotificationW
lstrlenA
GetVolumeNameForVolumeMountPointA
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetOEMCP
GetACP
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetModuleHandleA
user32
IsRectEmpty
CallMsgFilterA
VkKeyScanA
DdeFreeDataHandle
SetScrollInfo
GetTabbedTextExtentA
GetSysColor
RealGetWindowClassW
IsCharAlphaA
SetKeyboardState
DefDlgProcW
CreateMDIWindowA
UnhookWinEvent
GetDoubleClickTime
GetInputState
GetWindowRgn
gdi32
StartDocW
GetCharWidth32A
GetObjectA
GetBoundsRect
advapi32
ReportEventA
ole32
CoGetMarshalSizeMax
GetHGlobalFromStream
ReleaseStgMedium
CoCopyProxy
CoQueryProxyBlanket
OleGetClipboard
WriteFmtUserTypeStg
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ