Static task
static1
Behavioral task
behavioral1
Sample
6cb013595d017927aea59caf7777a820_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6cb013595d017927aea59caf7777a820_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6cb013595d017927aea59caf7777a820_NeikiAnalytics.exe
-
Size
459KB
-
MD5
6cb013595d017927aea59caf7777a820
-
SHA1
39e487ba976aceeb45c91899b301644489279581
-
SHA256
dc6c06cc55a1aa0701775f6ac95b32db14db97493b96f733b1abc09c5973d005
-
SHA512
ec13d1659741529e6d5376c9a3295dcc61de0bf2fbd90d6f50f5643566ea1b61c16a98f2dde45769e3d56702477b20888d4b52de434f9de1415d390e847e4958
-
SSDEEP
12288:i5HEuIrsyaZbN5vH5N6o0Pwd2vIF06b7:i5kuIrZaZ7vH5aPwdmIp7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cb013595d017927aea59caf7777a820_NeikiAnalytics.exe
Files
-
6cb013595d017927aea59caf7777a820_NeikiAnalytics.exe.exe windows:6 windows x86 arch:x86
b5614b22db96bf05f68a9a8fccd53160
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
CreateDirectoryA
GetModuleFileNameA
GetUserDefaultUILanguage
GetLocaleInfoA
MultiByteToWideChar
GetTempPathA
GetFileAttributesA
GetNativeSystemInfo
GetProcAddress
GetModuleHandleW
WriteConsoleW
CreateFileW
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LoadResource
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
SetFilePointerEx
GetFileType
GetFileAttributesExW
DeleteFileW
ResetEvent
CreateThread
CloseHandle
LockResource
SetEvent
GetLastError
CreateEventW
FreeResource
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
HeapFree
WriteFile
GetStdHandle
FreeEnvironmentStringsW
SizeofResource
ExitProcess
GetModuleHandleExW
ExitThread
RaiseException
RtlUnwind
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
LoadLibraryExW
GetModuleHandleA
GetModuleFileNameW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
SwitchToThread
GetCurrentThread
QueryPerformanceCounter
GetStringTypeW
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
EncodePointer
DecodePointer
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
user32
SystemParametersInfoW
GetClientRect
LoadCursorW
LoadIconW
TranslateMessage
TranslateAcceleratorW
SetTimer
DispatchMessageW
ShowWindow
LoadAcceleratorsW
RegisterClassExW
SetWindowTextW
CreateWindowExW
MessageBoxW
SetWindowPos
DestroyWindow
PostMessageW
DefWindowProcW
GetMessageW
InvalidateRect
BeginPaint
EndPaint
GetDC
PostQuitMessage
ReleaseDC
UpdateLayeredWindow
gdi32
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
shell32
ShellExecuteExA
ole32
StringFromGUID2
iphlpapi
GetAdaptersAddresses
gdiplus
GdipImageGetFrameCount
GdipDeleteGraphics
GdipGetImageWidth
GdipImageGetFrameDimensionsList
GdipLoadImageFromStream
GdipImageSelectActiveFrame
GdipFree
GdipDisposeImage
GdipDrawImageRectI
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipGetPropertyItem
GdipCloneImage
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGraphicsClear
GdipSetSmoothingMode
GdipGetPropertyItemSize
shlwapi
ord12
Sections
.text Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ