Static task
static1
Behavioral task
behavioral1
Sample
bd22d585588bcf0e2f7c11adb4e73680_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
bd22d585588bcf0e2f7c11adb4e73680_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
bd22d585588bcf0e2f7c11adb4e73680_NeikiAnalytics.exe
-
Size
537KB
-
MD5
bd22d585588bcf0e2f7c11adb4e73680
-
SHA1
6abaf3a32c6171880803941b329895cf50d7722c
-
SHA256
099193b1faf4aaf16b09887311da3158affdce6749c45a15a9e84993d410be9f
-
SHA512
2cdf428b4b1408c51981a6bc6d638f419867d322f4704f0c6b5a79f0678e4b891aa982731f77ef434d28a3898ad8dfad7e4f57bc84325a500a4aee711fd07d06
-
SSDEEP
12288:7Oy0pqFHbYzS8tUSEQEhyUylx4uM+JcZKPZLl2wI4ctaSRSEq8LH:StPgyUyL4u0ml2wunSEq8LH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd22d585588bcf0e2f7c11adb4e73680_NeikiAnalytics.exe
Files
-
bd22d585588bcf0e2f7c11adb4e73680_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
f3bb55d960a5d39712455943fcad146d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetDiskFreeSpaceA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileType
ExitProcess
GetCommandLineA
GetStartupInfoA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetCurrentDirectoryA
CloseHandle
GetLastError
SetFilePointer
ReadFile
DeleteFileA
WriteFile
CreateFileA
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
GlobalAlloc
GlobalFree
user32
MessageBoxA
LoadStringA
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ