Behavioral task
behavioral1
Sample
0f36abd8ad31d8f2e63485c167b94b80_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f36abd8ad31d8f2e63485c167b94b80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
0f36abd8ad31d8f2e63485c167b94b80_NeikiAnalytics.exe
-
Size
472KB
-
MD5
0f36abd8ad31d8f2e63485c167b94b80
-
SHA1
1de13e437d744225b8539df015a5c533043f39f4
-
SHA256
cf12f252751ddf8adbd1293ac81640ef29350309a9efd6fbfdcc5dae79e92241
-
SHA512
fbafe3e8f7ba77f7456ad4e9abe192c5efdf53942a69e8a0f051e9c2cd52c2b50e9d5108b3f3530e33e0b5b0238a8be5d585cc962358598f4f05951bdf5f2cb5
-
SSDEEP
3072:V9QDoCDQxdIO+bD/qi8WotuSUdSyiNdi1icDPpG9mD+5aNCLgNHH9:V9BGaIDbKWosdSJihhUm2aYkHd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f36abd8ad31d8f2e63485c167b94b80_NeikiAnalytics.exe
Files
-
0f36abd8ad31d8f2e63485c167b94b80_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
adf801abd4677429ccec4447083cae59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesExA
GetLastError
GetModuleHandleA
GetProcAddress
CloseHandle
GetTempPathA
GetTickCount
RtlUnwind
SetLastError
GetCommandLineA
GetStdHandle
MultiByteToWideChar
GetFileType
LoadLibraryA
FreeLibrary
LocalFree
FindFirstFileA
LocalAlloc
WriteConsoleA
FormatMessageA
FindNextFileA
GetFileAttributesA
VerifyVersionInfoW
crtdll
__GetMainArgs
exit
raise
signal
ntdll
VerSetConditionMask
wcsncpy
wcschr
wcslen
memmove
_wcslwr
wcscmp
wcscpy
_wcsnicmp
wcscat
_ultoa
wcstoul
wcstol
user32
LoadStringA
winsta
WinStationOpenServerW
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE