Static task
static1
Behavioral task
behavioral1
Sample
6c0a7ef8de7659f3d91dbe3f12c10da0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6c0a7ef8de7659f3d91dbe3f12c10da0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6c0a7ef8de7659f3d91dbe3f12c10da0_NeikiAnalytics.exe
-
Size
2.1MB
-
MD5
6c0a7ef8de7659f3d91dbe3f12c10da0
-
SHA1
00c41ebe5aae52b4929a46c6d585eb64f14d2b1e
-
SHA256
b6826a4b2a35ec0181cbf666104976b19a68c91a4b624c4f3484fd3054ea4edf
-
SHA512
5b1c05b638cc29eac1c4450d1a63c8863cec5831475a0b0fa55287d3ad9aec5f6eb46619f669c1bf1dc2c320d95743949739dd7ecf97972ac3d7a22191637f16
-
SSDEEP
49152:z8v4NlhRrrn+TiwbcOoFUwWrVAkPSCaB/0vWYzMGGL0K:Xrrn+TiqcOaVaVAqlaFvYzMGGYK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c0a7ef8de7659f3d91dbe3f12c10da0_NeikiAnalytics.exe
Files
-
6c0a7ef8de7659f3d91dbe3f12c10da0_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
7ea21c1311ee2777bbbdf212fa993b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ws2_32
closesocket
recv
send
connect
htons
socket
gethostbyname
WSAStartup
kernel32
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileTime
SetErrorMode
FileTimeToLocalFileTime
GetFileSizeEx
ExitThread
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
VirtualQuery
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
VirtualFree
HeapCreate
GetStdHandle
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GlobalFlags
FileTimeToSystemTime
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
GlobalAddAtomA
CreateEventA
SetEvent
GetCurrentProcessId
WritePrivateProfileStringA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
CompareStringA
lstrcmpA
FreeLibrary
GetModuleHandleA
GetProcAddress
SetLastError
FormatMessageA
LocalFree
MultiByteToWideChar
MulDiv
lstrlenA
SetFileTime
WriteFile
DosDateTimeToFileTime
SystemTimeToFileTime
GetFileType
GetCurrentProcess
DuplicateHandle
SetCurrentDirectoryA
WaitForSingleObject
CreateProcessA
CreatePipe
SetVolumeLabelA
CopyFileA
CreateDirectoryA
Sleep
GetTickCount
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CreateThread
lstrcatA
GetLogicalDriveStringsA
GetFileSize
ReadFile
SetFilePointer
GetTempPathA
FindClose
FindNextFileA
DeleteFileA
RemoveDirectoryA
SetFileAttributesA
FindFirstFileA
DeviceIoControl
ResumeThread
GetVersionExA
GetSystemInfo
SuspendThread
GetCurrentDirectoryA
CreateMutexA
LockResource
CreateFileA
SizeofResource
LoadResource
FindResourceA
GetLastError
GetModuleFileNameA
WideCharToMultiByte
InterlockedExchange
CloseHandle
LeaveCriticalSection
EnterCriticalSection
ExitProcess
user32
TranslateAcceleratorA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatA
GetSysColorBrush
ReleaseCapture
SetCapture
KillTimer
SetTimer
SetWindowRgn
IsRectEmpty
InvalidateRect
DestroyMenu
GetMenuItemInfoA
InflateRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExA
SetRectEmpty
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
ShowOwnedPopups
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetSysColor
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
TabbedTextOutA
GetWindowThreadProcessId
GetLastActivePopup
CopyRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
GetParent
MapDialogRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnregisterClassA
CharUpperA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
GetKeyState
SetRect
CopyAcceleratorTableA
CharNextA
GetClassInfoExA
GetCursor
EndPaint
BeginPaint
PostMessageA
DrawTextA
FillRect
MessageBoxA
SetCursor
PtInRect
DrawIcon
GetClientRect
IsIconic
ReleaseDC
SetWindowPos
GetDC
GetSystemMetrics
LoadCursorA
PostThreadMessageA
SendMessageA
PostQuitMessage
AppendMenuA
GetSystemMenu
LoadIconA
EnableWindow
GetWindowRect
GetWindowTextA
gdi32
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
GetStockObject
RectVisible
CreateFontIndirectA
GetTextExtentPoint32A
CreateEllipticRgn
LPtoDP
Ellipse
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
GetObjectA
CreateCompatibleBitmap
TextOutA
CreateFontA
SetBkMode
SetTextColor
CreateSolidBrush
SelectObject
GetDIBColorTable
StretchBlt
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
CreateRectRgnIndirect
GetDeviceCaps
SetDIBColorTable
CreateDIBSection
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
shell32
ShellExecuteA
DragFinish
DragQueryFileA
Shell_NotifyIconA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
oledlg
ord8
ole32
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateStreamOnHGlobal
oleaut32
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
VariantInit
VariantChangeType
OleCreateFontIndirect
SysAllocStringByteLen
SysFreeString
SysStringLen
gdiplus
GdipDisposeImage
GdipGetImageGraphicsContext
GdipFree
GdiplusShutdown
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipAlloc
GdiplusStartup
GdipBitmapUnlockBits
Sections
.text Size: 279KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ