Static task
static1
Behavioral task
behavioral1
Sample
03f02cd3d584e95a2ef57a2b43687e20_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
03f02cd3d584e95a2ef57a2b43687e20_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
03f02cd3d584e95a2ef57a2b43687e20_NeikiAnalytics.exe
-
Size
3.4MB
-
MD5
03f02cd3d584e95a2ef57a2b43687e20
-
SHA1
daf7700b14bb543cd965a4e92a927b4b7eed361d
-
SHA256
eb1fef0f7a85fe74065a5b22f1d63e04793d1e90cde312c7e30ae368d747eb9b
-
SHA512
675cd4b6e47fd23bd56920273a78544843ef37f560d387b5995a834affc7790f0f0f14e992e4cff410102771ed8d6c954c9084d56ce986de178feb84f2d8b789
-
SSDEEP
98304:JWMY1sHaiQSd2melcxiaaBX0DwNRBVznB2Wezc:JWMY1sH5QSd27lcbMJP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03f02cd3d584e95a2ef57a2b43687e20_NeikiAnalytics.exe
Files
-
03f02cd3d584e95a2ef57a2b43687e20_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
e4c0847199560621d5b0bd77faebce8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
FlushFileBuffers
FlushInstructionCache
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetTempFileNameW
GetTempPathW
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
FindResourceW
LCMapStringW
LoadLibraryExW
LoadResource
LocalAlloc
LocalFree
LockResource
lstrcmpiW
lstrcmpW
lstrcpyA
lstrcpynW
lstrcpyW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OpenFileMappingW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
RemoveDirectoryW
ResetEvent
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepEx
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
GetVersion
GetCurrentProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
FindResourceExW
FindNextFileW
FindFirstFileW
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateProcessW
CreateMutexW
GetSystemTimeAsFileTime
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
GetProcAddress
LCMapStringA
user32
GetDlgCtrlID
GetDlgItemInt
GetDlgItemTextW
GetFocus
GetForegroundWindow
GetKeyState
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuStringW
GetMessageW
GetParent
GetPropW
GetScrollInfo
GetSubMenu
GetSystemMetrics
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageW
IsRectEmpty
IsWindowEnabled
IsWindowVisible
KillTimer
LoadAcceleratorsW
LoadCursorW
LoadIconW
LoadMenuW
MapDialogRect
MapWindowPoints
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageW
SendMessageW
SetCapture
SetClipboardData
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropW
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowCursor
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
wsprintfW
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoExW
GetCaretPos
GetCapture
GetActiveWindow
FindWindowW
FindWindowExW
FillRect
EqualRect
EnumWindows
EnumChildWindows
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawIcon
DispatchMessageW
DialogBoxParamW
DialogBoxIndirectParamW
DestroyWindow
DestroyMenu
DestroyAcceleratorTable
DefWindowProcW
CreatePopupMenu
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyRect
ClientToScreen
CheckMenuItem
CharNextW
CharNextExA
CallWindowProcW
GetSysColor
CreateWindowExW
gdi32
OffsetWindowOrgEx
SelectObject
SetBkColor
OffsetRgn
SetPixel
SetTextColor
SetWindowOrgEx
MoveToEx
LineTo
GetTextMetricsW
GetTextExtentPoint32W
GetStockObject
GetObjectW
GetICMProfileW
GetDeviceCaps
ExtTextOutW
SetBkMode
ExcludeClipRect
ExtCreateRegion
advapi32
RegSetValueExA
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
ole32
OleInitialize
OleCreate
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
OleUninitialize
OleSetContainedObject
CoUninitialize
OleLockRunning
Sections
.text Size: 756KB - Virtual size: 753KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_flac_4 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE