Static task
static1
Behavioral task
behavioral1
Sample
1647a669254931ccc045fcc580316310_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1647a669254931ccc045fcc580316310_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1647a669254931ccc045fcc580316310_NeikiAnalytics.exe
-
Size
3.1MB
-
MD5
1647a669254931ccc045fcc580316310
-
SHA1
8082235a9b8977c1148f5725f5e4986ebd84c075
-
SHA256
c5e6493437fa6b29ad2870bbdb150cecf18fc2e7a8ee05a68b6e57b9a4b8f640
-
SHA512
6969378435c7a914f0d6f93852d11fe440db3b7283e0c4bdce273bded4447ef99ed9816c302878139f58093c253c1f75d7a6b72198978a3a297bdc35fc649dd4
-
SSDEEP
49152:Z1oBVAnjSkF4935ZfY7CTmAw/sOYn5IyuVT6WYjlzV8:Z1v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1647a669254931ccc045fcc580316310_NeikiAnalytics.exe
Files
-
1647a669254931ccc045fcc580316310_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
859767c78c7013c274eafb02ce2ad083
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleHandleA
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
mingwm10
__mingwthr_key_dtor
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memchr
memcpy
memmove
memset
signal
strcmp
strlen
qtcored4
_Z13qFlagLocationPKc
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z5qFreePv
_Z7qMallocj
_Z7qMemSetPvij
_Z8qReallocPvj
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qt_assertPKcS0_i
_ZN10QByteArray11shared_nullE
_ZN10QByteArray7reallocEi
_ZN10QByteArrayaSEPKc
_ZN10QByteArrayaSERKS_
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QVectorData6mallocEiiiPS_
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile5closeEv
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN7QBuffer4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN7QBuffer5closeEv
_ZN7QBufferC1EP10QByteArrayP7QObject
_ZN7QBufferD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString16codecForCStringsE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString9fromAsciiEPKci
_ZN7QString9fromUtf16EPKti
_ZN8QSysInfo14windowsVersionEv
_ZN9QIODevice7readAllEv
_ZN9QListData6appendEv
_ZN9QListData7detach2Ev
_ZN9QMimeData11qt_metacallEN11QMetaObject4CallEiPPv
_ZN9QMimeData11qt_metacastEPKc
_ZN9QMimeData16staticMetaObjectE
_ZN9QMimeData7setDataERK7QStringRK10QByteArray
_ZN9QMimeDataC2Ev
_ZN9QMimeDataD2Ev
_ZNK11QMetaObject2trEPKcS1_
_ZNK7QString11toLocal8BitEv
_ZNK7QStringeqERK13QLatin1String
_ZNK7QStringeqERKS_
_ZNK9QMimeData12retrieveDataERK7QStringN8QVariant4TypeE
_ZNK9QMimeData7formatsEv
_ZNK9QMimeData9hasFormatERK7QString
qtguid4
_ZN11QGridLayout9addWidgetEP7QWidgetii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1Ev
_ZN11QPushButtonC1ERK7QStringP7QWidget
_ZN11QScrollArea9setWidgetEP7QWidget
_ZN11QScrollAreaC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN15QAbstractButton7setIconERK5QIcon
_ZN5QDrag11setMimeDataEP9QMimeData
_ZN5QDrag4execE6QFlagsIN2Qt10DropActionEE
_ZN5QDrag9setPixmapERK7QPixmap
_ZN5QDragC1EP7QWidget
_ZN5QIconC1ERK7QString
_ZN5QIconD1Ev
_ZN6QImageC1ERK5QSizeNS_6FormatE
_ZN6QImageD1Ev
_ZN6QLabelC1ERK7QStringP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QPixmapC1ERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE
_ZN7QPixmapD1Ev
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QWidget11qt_metacastEPKc
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16contextMenuEventEP17QContextMenuEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16staticMetaObjectE
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setLayoutEP7QLayout
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidgetD2Ev
_ZN8QPainter3endEv
_ZN8QPainter5beginEP12QPaintDevice
_ZN8QPainterC1Ev
_ZN8QPainterD1Ev
_ZNK6QImage4saveEP9QIODevicePKci
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__
qtsvgd4
_ZN10QSvgWidgetC1EP7QWidget
_ZN12QSvgRenderer4loadERK10QByteArray
_ZN12QSvgRenderer6renderEP8QPainter
_ZNK10QSvgWidget8rendererEv
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 119KB - Virtual size: 119KB
IMAGE_SCN_MEM_DISCARDABLE
.stabstr Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_MEM_DISCARDABLE