Static task
static1
Behavioral task
behavioral1
Sample
55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe
-
Size
291KB
-
MD5
55c88a2f483e264295aef03a3938f060
-
SHA1
7f503f364b225192f5e50ae7dae59e56903581d7
-
SHA256
c97896a312f257f9a14b90e2481e7c7e8ba7a949eb43e10d5e91a7198caa31f4
-
SHA512
2cc822e33e9f103adf059a8833c4974b6740d7c76e29c9979629defad7c108a206ead3f499a14d8fcba77b81e8c9b52eebde078b45725adfd97fea5401b8830e
-
SSDEEP
3072:i6jR7tyWNFHJ/HO/hpfk+WJ5MbvnjIxl0qtUh5rm5/F7o6iLlN3vuJO:JjR7VNFHJ/Cfk+WELWXUhFm8AO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe
Files
-
55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe.exe windows:4 windows x64 arch:x64
b01267edba564c5cb0f92af8ea0b22f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
InitCommonControls
comdlg32
GetOpenFileNameA
kernel32
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCurrentDirectoryA
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
_strdup
_stricmp
_strnicmp
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_localtime64
_lock
_onexit
_setjmp
_stat64
_time64
_unlock
_vsnprintf
abort
atof
atoi
atol
calloc
exit
fclose
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
malloc
memcpy
memmove
memset
printf
putchar
realloc
signal
sprintf
strcat
strchr
strcmp
strcpy
strftime
strlen
strncat
strncmp
strncpy
strstr
tolower
toupper
vfprintf
user32
AdjustWindowRectEx
AppendMenuA
BeginPaint
BringWindowToTop
CreateMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DestroyWindow
DispatchMessageA
EndPaint
GetClientRect
GetMessageA
GetSystemMetrics
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
LoadCursorA
MessageBoxA
PeekMessageA
RedrawWindow
RegisterClassA
SendMessageA
SetFocus
SetMenu
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMDISysAccel
TranslateMessage
UpdateWindow
Sections
.text Size: 221KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 903KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE