Static task
static1
Behavioral task
behavioral1
Sample
3968574dfcdd816b90b5179caf056a40_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
3968574dfcdd816b90b5179caf056a40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3968574dfcdd816b90b5179caf056a40_NeikiAnalytics.exe
-
Size
3.8MB
-
MD5
3968574dfcdd816b90b5179caf056a40
-
SHA1
23ae5b9e6d73a4cfa84ee542a1f7cf2eee30115e
-
SHA256
92270ba187816d506a24897fa9ff358415f8c357fe0c73b0019f2a2727fc5c24
-
SHA512
e981d4bacaccc575296a7d2a313ea92a6e672a66dc4952360f3b9532fb88248a60bfb00d31fbf3ccb982ceb45b1ab714d55cee44f43c96a483f5fa6a53be2afa
-
SSDEEP
49152:a2VoNn+P/SjQebykcPBKNamJ+86kxtwMJdAwgLHbqaOj2qhTE+NudGR01X2fx:rSjQerQkxeMPAwI+7j1EjdGRUX2fx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3968574dfcdd816b90b5179caf056a40_NeikiAnalytics.exe
Files
-
3968574dfcdd816b90b5179caf056a40_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
b76618c81f58b4abac7cf3f8459f1939
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
UnlockFile
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
LoadLibraryA
LeaveCriticalSection
SetEndOfFile
SetCurrentDirectoryW
SetCurrentDirectoryA
ResumeThread
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetStartupInfoW
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DosDateTimeToFileTime
DuplicateHandle
EnumCalendarInfoA
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
EnumSystemCodePagesA
ResetEvent
RemoveDirectoryW
RemoveDirectoryA
ReadProcessMemory
ReadFile
PeekNamedPipe
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileA
LockResource
LockFile
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVersionExA
GetUserDefaultLCID
GetThreadPriority
GetThreadLocale
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetStartupInfoA
GetProfileStringA
GetProcessHeap
GetProcessAffinityMask
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocalTime
GetLocaleInfoA
GetLastError
GetFileAttributesW
GetFileAttributesA
GetExitCodeProcess
GetEnvironmentStrings
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
GetConsoleOutputCP
GetConsoleMode
GetComputerNameA
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsA
EnumSystemLocalesA
FormatMessageA
FindResourceExA
FindResourceA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
ExitProcess
user32
SetClassLongA
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetMenuItemInfoW
SetParent
SetPropA
SetRect
SetScrollInfo
SetSysColors
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
ShowWindowAsync
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
UnregisterClassA
UnregisterClassW
UpdateWindow
WindowFromDC
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterClipboardFormatA
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharBuffA
OemToCharA
MsgWaitForMultipleObjects
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
LoadImageA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsMenu
IsIconic
IsClipboardFormatAvailable
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuItemA
InflateRect
HideCaret
GetWindowTextW
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
SetCaretPos
GetWindowDC
GetWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollInfo
GetPropA
GetParent
GetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemCount
GetMenu
GetKeyState
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetClipboardFormatNameA
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoA
GetCaretPos
GetCapture
GetActiveWindow
FrameRect
FillRect
EnumThreadWindows
EnumPropsA
EnumClipboardFormats
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawStateW
DrawStateA
DrawMenuBar
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateCaret
CountClipboardFormats
CopyImage
CloseClipboard
ClientToScreen
ChildWindowFromPointEx
CharUpperBuffW
CharUpperBuffA
CharUpperA
CharToOemBuffA
CharToOemA
CharLowerBuffW
CharLowerBuffA
CharLowerA
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
GetWindowLongA
ScrollWindowEx
BeginDeferWindowPos
AdjustWindowRectEx
GetWindowThreadProcessId
gdi32
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCW
CreateDIBitmap
CreateDIBSection
CreateEllipticRgn
CreateFontIndirectA
CreateFontIndirectW
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DPtoLP
Ellipse
EndPage
EnumFontFamiliesA
EnumFontFamiliesExA
EnumFontFamiliesExW
EqualRgn
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
GetBkColor
GetCharABCWidthsA
GetCharABCWidthsW
GetClipBox
GetClipRgn
GetCurrentObject
GetDCOrgEx
GetDeviceCaps
GetDIBits
GetMapMode
GetObjectA
GetObjectType
GetObjectW
GetPixel
GetRegionData
GetRgnBox
CombineRgn
GetStockObject
GetTextAlign
GetTextColor
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextMetricsA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
LPtoDP
MaskBlt
MoveToEx
OffsetRgn
OffsetViewportOrgEx
PaintRgn
PatBlt
Pie
PolyBezier
Polyline
PtInRegion
RealizePalette
Rectangle
RectInRegion
RectVisible
RestoreDC
SaveDC
SelectObject
SelectPalette
SetArcDirection
SetBkColor
SetBkMode
SetBrushOrgEx
SetMapMode
SetPixel
SetPolyFillMode
SetRectRgn
SetROP2
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartPage
Chord
BitBlt
GetROP2
Arc
winspool.drv
EnumPrintersA
EnumPrintersW
OpenPrinterA
OpenPrinterW
GetPrinterA
StartDocPrinterA
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
DocumentPropertiesA
DocumentPropertiesW
DeviceCapabilitiesW
DeviceCapabilitiesA
ClosePrinter
comdlg32
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
ChooseFontA
ChooseFontW
PrintDlgA
PrintDlgW
CommDlgExtendedError
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
DragQueryFileW
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA
ole32
CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleInitialize
CoCreateInstance
oleaut32
VariantCopy
VariantChangeTypeEx
SysReAllocStringLen
SysFreeString
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayRedim
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayCreate
VariantInit
VariantClear
SafeArrayAccessData
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
_controlfp
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 936KB - Virtual size: 935KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_bcore_8 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE