Static task
static1
Behavioral task
behavioral1
Sample
9d31322850ea27db09f3ccd0d43ac500_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9d31322850ea27db09f3ccd0d43ac500_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
9d31322850ea27db09f3ccd0d43ac500_NeikiAnalytics.exe
-
Size
321KB
-
MD5
9d31322850ea27db09f3ccd0d43ac500
-
SHA1
382dee927b4bca92abd67d9f0c2a5100becaa0b9
-
SHA256
3ddfe85833a4d061fbecc75ffdc51f3e453978cb133e0423068488d4b8fd7843
-
SHA512
17d6a556770012bdce7377918f628e6056602aecdd3cd646bc29662ea15a2d565086b483161be362968dbf8d053a5ff1f6f78725c78515c308e548ffdf878724
-
SSDEEP
6144:8zmZ8XNfapGqsxP7Bgqz6bRzTdiYHXtSLwfGqykuOb++J:8KZ89SIh7z6F3RHXKaGKuOS+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d31322850ea27db09f3ccd0d43ac500_NeikiAnalytics.exe
Files
-
9d31322850ea27db09f3ccd0d43ac500_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
ec41b624ca8ea5de4fc99e18711df3fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrDllUnregisterProxy
NdrOleAllocate
CStdStubBuffer_AddRef
NdrDllRegisterProxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_Invoke
NdrDllCanUnloadNow
CStdStubBuffer_CountRefs
NdrDllGetClassObject
CStdStubBuffer_Disconnect
NdrOleFree
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_IsIIDSupported
kernel32
lstrcatW
QueryPerformanceCounter
DeleteCriticalSection
lstrcpynW
LeaveCriticalSection
LoadResource
GetSystemTimeAsFileTime
LoadLibraryW
GetProcAddress
lstrcmpiW
SetLastError
FlushInstructionCache
InterlockedDecrement
HeapDestroy
GetLastError
HeapAlloc
SetUnhandledExceptionFilter
FormatMessageW
GetCurrentProcessId
LoadLibraryA
FindResourceW
FreeLibrary
lstrcpyW
InterlockedIncrement
SizeofResource
lstrlenA
GetEnvironmentStringsA
GetProcessHeap
VirtualFree
GetSystemInfo
GetUserDefaultLCID
MultiByteToWideChar
OutputDebugStringA
GetTickCount
GetModuleFileNameW
lstrlenW
IsValidCodePage
GetStartupInfoA
HeapFree
GetCurrentProcess
LocalFree
gdi32
SetBkMode
advapi32
GetTraceLoggerHandle
RegCloseKey
GetTraceEnableFlags
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegisterTraceGuidsW
UnregisterTraceGuids
RegQueryInfoKeyW
GetTraceEnableLevel
RegOpenKeyExW
RegDeleteValueW
TraceMessage
RegSetValueExW
user32
SetFocus
SendMessageW
ShowWindow
LoadStringW
CharNextW
SetWindowTextW
SetWindowPos
MessageBoxW
MapWindowPoints
GetDlgItemTextW
DialogBoxParamW
GetParent
SetDlgItemTextW
GetClientRect
DestroyWindow
GetSystemMetrics
EnableWindow
SendDlgItemMessageW
GetWindowLongW
CopyRect
DrawTextW
CreateDialogParamW
GetWindowRect
GetWindow
LoadImageW
GetDialogBaseUnits
SystemParametersInfoW
EndDialog
GetDlgItem
SetWindowLongW
wldap32
ldap_count_entries
ldap_count_references
ldap_count_values
ldap_controls_freeW
shell32
SHGetFolderPathW
ShellExecuteW
Sections
text Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 157KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ