Static task
static1
Behavioral task
behavioral1
Sample
73d7dc729646dc6b49bc9f3c3cd47e80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
73d7dc729646dc6b49bc9f3c3cd47e80_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
73d7dc729646dc6b49bc9f3c3cd47e80_NeikiAnalytics.exe
-
Size
60KB
-
MD5
73d7dc729646dc6b49bc9f3c3cd47e80
-
SHA1
474f39d325d41c1508a7c8b59e07cbe82a797342
-
SHA256
dee83ec1d4bce82482e214e89042d68b6fa1dfe62066682170505c673cab8b79
-
SHA512
35011d201d88beb41647ca43c128ff3f7b43336bcfe95d3a2069d19e485f7a61a117eb5d6bd00cf6f969dc0ea593fdb53d5ad642cd1f6186e4d04035c4a5b41b
-
SSDEEP
384:xPADVJlKKAaEbi/XqnHT5WECCvxmFSiYOyh/mcEoXzjBPNcgaeHuJRqB2OPPGyee:xPAKVbiyXIYOyhT9DjogaeO/qB26Ve
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73d7dc729646dc6b49bc9f3c3cd47e80_NeikiAnalytics.exe
Files
-
73d7dc729646dc6b49bc9f3c3cd47e80_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
078afddbf3ba06f844b58f09c8561e07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateFontIndirectA
user32
CharLowerA
ShowWindow
SendMessageA
SendDlgItemMessageA
MessageBoxA
LoadIconA
GetDlgItemTextA
GetDlgItem
EnableWindow
wsprintfA
DialogBoxParamA
kernel32
OpenProcess
lstrlenA
lstrcpyA
lstrcatA
WriteProcessMemory
WriteFile
WaitForSingleObject
WaitForMultipleObjects
WaitForDebugEvent
CloseHandle
ContinueDebugEvent
CreateFileA
CreateMutexA
CreateProcessA
CreateThread
DebugActiveProcess
DeleteFileA
ExitProcess
ExitThread
GetCurrentDirectoryA
GetExitCodeProcess
GetFileSize
GetModuleHandleA
GetProcAddress
GetThreadContext
VirtualQueryEx
LoadLibraryA
GetTickCount
OpenThread
ReadFile
ReadProcessMemory
ReleaseMutex
ResumeThread
SetFileAttributesA
SetFilePointer
SetThreadContext
Sleep
SuspendThread
TerminateProcess
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtectEx
comdlg32
GetOpenFileNameA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE