Static task
static1
Behavioral task
behavioral1
Sample
2e5c3091f29755c9bb5725607f3eac71f7a342617b8108a52227913ed2d14fb7_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2e5c3091f29755c9bb5725607f3eac71f7a342617b8108a52227913ed2d14fb7_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2e5c3091f29755c9bb5725607f3eac71f7a342617b8108a52227913ed2d14fb7_NeikiAnalytics.exe
-
Size
236KB
-
MD5
b2601f06684712ce0925e9cf9a193ac0
-
SHA1
fded7b8a16960d62d891e237c4919034014147c8
-
SHA256
2e5c3091f29755c9bb5725607f3eac71f7a342617b8108a52227913ed2d14fb7
-
SHA512
dd5691f5b0d38db5fa226f673ab41d4cf6f2ab7a4b02e99b37012c468478236ad69c6e74ac8e9ae8ceecc22ea7d0367730fc60b7f403094ee9ed8d0d40bffcfc
-
SSDEEP
3072:NBSD22j6BTekok8QpIVgsPEDDuHyeJzaqsYXstmucch/mkRInt1vYh3U4KAn7YBD:NBYSekt5y5BzaqJsFc6ukK0RUv07Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e5c3091f29755c9bb5725607f3eac71f7a342617b8108a52227913ed2d14fb7_NeikiAnalytics.exe
Files
-
2e5c3091f29755c9bb5725607f3eac71f7a342617b8108a52227913ed2d14fb7_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
3cc72b27abdfd6816d3ef7af876aa9a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBkColor
GetDCBrushColor
GetDCPenColor
GetClipRgn
GetMetaRgn
GetCurrentObject
GetDeviceCaps
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetPixelFormat
GetPolyFillMode
GetRandomRgn
GetStretchBltMode
GetSystemPaletteUse
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextCharset
GetTextCharsetInfo
GetFontLanguageInfo
GetFontUnicodeRanges
SetPixel
SetSystemPaletteUse
SetTextCharacterExtra
SetTextColor
user32
SetWindowTextA
GetWindowContextHelpId
GetMenuContextHelpId
GetCursor
GetWindowLongA
LoadIconA
RemovePropA
GetPropA
GetScrollPos
EndPaint
BeginPaint
GetWindowDC
WindowFromDC
GetForegroundWindow
DrawTextA
GetMenuCheckMarkDimensions
GetMenuItemID
GetMenuState
GetMenu
IsWindowEnabled
EnableWindow
IsWindowUnicode
GetQueueStatus
GetInputState
GetKeyboardType
SetFocus
GetDialogBaseUnits
CheckDlgButton
SetDlgItemTextA
GetDlgItemInt
GetDlgItem
EndDialog
MoveWindow
ShowWindow
CallWindowProcA
PostMessageA
GetMenuItemCount
kernel32
MoveFileA
FindResourceA
LocalFlags
GlobalHandle
GlobalFlags
GlobalSize
GlobalAlloc
SizeofResource
LockResource
GetProcAddress
GetModuleHandleA
GetTickCount
GetVersion
IsProcessorFeaturePresent
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetProcessHeap
HeapAlloc
QueryPerformanceCounter
GetLastError
CloseHandle
IsDebuggerPresent
WriteFile
SetFilePointer
GetFileType
GetFileTime
GetDriveTypeA
DeleteFileA
GetStdHandle
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ