Static task
static1
Behavioral task
behavioral1
Sample
43e185bbdbb0916005dcbf6a26ae26d0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
43e185bbdbb0916005dcbf6a26ae26d0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
43e185bbdbb0916005dcbf6a26ae26d0_NeikiAnalytics.exe
-
Size
271KB
-
MD5
43e185bbdbb0916005dcbf6a26ae26d0
-
SHA1
2bb9bfb48264de28ce3355201f56006ee0426c86
-
SHA256
3e8b278a4e49789a63e7432f83112b02148caced2740130970aaf161416b40a0
-
SHA512
8a2b2e6509c773a6fa6aeead4f51c67660f113a2a7a923803e5a8f75c94fbe7a75038e881b7df78bdd2777c73b71a4cc154831213b2931e7948821acd333387b
-
SSDEEP
6144:oLC3eVkBeR832XrphFK/H3zF/A2KsD5EZNIAjh:AkMJrphm3ND5E3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43e185bbdbb0916005dcbf6a26ae26d0_NeikiAnalytics.exe
Files
-
43e185bbdbb0916005dcbf6a26ae26d0_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
9d6c42a53b1b80c24a6ff209f03e7618
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
imm32
ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext
ImmGetDefaultIMEWnd
ImmSetCompositionFontA
ImmSetCompositionWindow
winmm
timeEndPeriod
timeGetTime
timeBeginPeriod
kernel32
Sleep
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GlobalUnlock
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
GetSystemPowerStatus
ExitProcess
GetModuleHandleW
VirtualAlloc
VirtualFree
HeapCreate
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetStartupInfoA
HeapFree
HeapAlloc
HeapReAlloc
CreateFileA
GetFileTime
CloseHandle
DeleteFileA
SetFileAttributesA
MultiByteToWideChar
GlobalGetAtomNameA
LoadLibraryA
GetProcAddress
FreeLibrary
MulDiv
GlobalFree
GetCommandLineA
CreateProcessA
GetVersionExA
GlobalAddAtomA
GlobalDeleteAtom
GetTempPathA
GetFileAttributesA
GetModuleFileNameA
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreA
GetModuleHandleA
SetEndOfFile
GetProcessHeap
WideCharToMultiByte
GetLastError
GetFileSize
ReadFile
GlobalAlloc
WriteFile
GlobalLock
GetEnvironmentStrings
user32
SetCaretPos
ShowCaret
HideCaret
SystemParametersInfoA
SetWindowPos
TrackMouseEvent
GetDesktopWindow
ShowScrollBar
GetWindowThreadProcessId
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
GetCursorPos
SetCursor
GetClipboardData
ShowCursor
GetScrollInfo
PeekMessageA
GetDoubleClickTime
DestroyCaret
CreateCaret
RegisterWindowMessageA
DrawIconEx
KillTimer
SetCapture
ReleaseCapture
SetTimer
GetCaretPos
GetFocus
GetMenu
GetMenuItemInfoA
EmptyClipboard
SetClipboardData
DialogBoxParamA
IsZoomed
PostQuitMessage
GetSysColorBrush
CreatePopupMenu
TrackPopupMenu
DestroyMenu
EnableMenuItem
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
GetMenuState
InsertMenuItemA
SetMenuItemInfoA
DeleteMenu
AppendMenuA
WaitForInputIdle
ScreenToClient
SetForegroundWindow
IsIconic
EnumWindows
GetClassNameA
MessageBoxA
ClientToScreen
DrawMenuBar
GetWindowDC
GetSysColor
wsprintfA
EndDialog
GetDlgItem
EnableWindow
SendDlgItemMessageA
GetSystemMetrics
GetWindowRect
AdjustWindowRectEx
SetFocus
PostMessageA
SetWindowTextA
GetDC
DrawTextA
MoveWindow
ReleaseDC
InvalidateRect
LoadCursorA
RegisterClassExA
DefWindowProcA
BeginPaint
EndPaint
LoadImageA
CreateWindowExA
DestroyWindow
FindWindowExA
GetWindowLongA
SetWindowLongA
ShowWindow
UpdateWindow
GetAsyncKeyState
CallWindowProcA
GetParent
SendMessageA
SetScrollInfo
gdi32
StartPage
StartDocA
CreateFontIndirectA
GetDeviceCaps
SetMapMode
DeleteObject
EndPage
BitBlt
CreateDIBSection
RealizePalette
SelectPalette
CreatePalette
TextOutA
PatBlt
SelectObject
CreateCompatibleBitmap
GetStockObject
SetTextColor
SetBkMode
CreateSolidBrush
SetBkColor
DeleteDC
CreateCompatibleDC
EndDoc
comdlg32
GetSaveFileNameA
PrintDlgA
CommDlgExtendedError
GetOpenFileNameA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
shell32
DragQueryPoint
DragQueryFileA
DragFinish
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
DragAcceptFiles
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ