Static task
static1
Behavioral task
behavioral1
Sample
714b89a2a88387c1b4a23fda552dddc0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
714b89a2a88387c1b4a23fda552dddc0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
714b89a2a88387c1b4a23fda552dddc0_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
714b89a2a88387c1b4a23fda552dddc0
-
SHA1
7bc6efc4d3f722aa99348ad724c31a20e5486d21
-
SHA256
9eba317018ab5e60f920cffbbb955b711b7b7288b89da12fd5537f3f2eb48eeb
-
SHA512
e77247b3f9d9df5343f5c025b0c22b02c8d2720cb2b6f0146932789fbc2b1cfaa09a6f81d793139df310f77e0d8694275c242033b8857debe25bddbe0b370689
-
SSDEEP
24576:dwSVy6vfNSkhdGidtbttQz2YzQiAGJbnA3nj4sD/mrpzbw4wo0:rVy6vwkPBdtbASYJJIj4gmr10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 714b89a2a88387c1b4a23fda552dddc0_NeikiAnalytics.exe
Files
-
714b89a2a88387c1b4a23fda552dddc0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
1ea2d65b7752c1ea271210cde142fb66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocConsole
Beep
CloseHandle
CreateDirectoryW
CreateFileW
CreatePipe
CreateSemaphoreW
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
FreeConsole
FreeLibrary
GetConsoleCP
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleTitleW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetEnvironmentVariableW
GetFileAttributesW
GetFileTime
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberOfConsoleInputEvents
GetNumberOfConsoleMouseButtons
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStdHandle
GetSystemInfo
GetSystemTime
GetTempFileNameW
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetVersionExW
GetVolumeInformationW
GlobalAlloc
GlobalLock
GlobalMemoryStatus
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedExchange
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
LockFile
LockFileEx
MoveFileW
MultiByteToWideChar
PeekNamedPipe
ReadConsoleInputW
ReadConsoleOutputW
ReadFile
RemoveDirectoryW
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleOutputCP
SetConsoleScreenBufferSize
SetConsoleTitleW
SetConsoleWindowInfo
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetFileAttributesW
SetFilePointer
SetFileTime
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TlsGetValue
UnlockFile
UnlockFileEx
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleOutputW
WriteFile
msvcrt
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_winmajor
abort
atexit
atoi
calloc
ceil
exit
exp
fclose
fmod
fopen
fprintf
fputc
fputs
free
fwrite
getenv
localeconv
log
malloc
memchr
memcmp
memcpy
memmove
modf
pow
rand
signal
sqrt
srand
strchr
strcmp
strlen
strncmp
strrchr
system
vfprintf
wcslen
user32
CloseClipboard
EmptyClipboard
EnableMenuItem
GetClipboardData
GetKeyState
GetKeyboardState
GetMenuState
GetSystemMenu
GetSystemMetrics
IsClipboardFormatAvailable
OpenClipboard
SetClipboardData
SetKeyboardState
Sections
.text Size: 1003KB - Virtual size: 1002KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 512B - Virtual size: 215B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/61 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/73 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/123 Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ