Static task
static1
Behavioral task
behavioral1
Sample
42b5d65b10d1122ba29aab15c3dab9ed7ae897d33ae2afc3225da7d600e30f86_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
42b5d65b10d1122ba29aab15c3dab9ed7ae897d33ae2afc3225da7d600e30f86_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
42b5d65b10d1122ba29aab15c3dab9ed7ae897d33ae2afc3225da7d600e30f86_NeikiAnalytics.exe
-
Size
712KB
-
MD5
6c760740e426fac204f34b268bdac8f0
-
SHA1
6ef4742a51210aba0f9d2c4b2ca4bc0af558213b
-
SHA256
42b5d65b10d1122ba29aab15c3dab9ed7ae897d33ae2afc3225da7d600e30f86
-
SHA512
6a5d9dc86cddbbe5f8e20c76f45da917581ed33bc568ce4d8169c9cf165a8e3cb91fe2f0bdea42c1bc3384a3fc9ad4a63c265eca3e09d6504421ccc96c2f4f75
-
SSDEEP
12288:OwxfBnWcomTKaQKf1ld/TXPeYJAW8kD/S:FZBnW8Vf1ld8yD6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42b5d65b10d1122ba29aab15c3dab9ed7ae897d33ae2afc3225da7d600e30f86_NeikiAnalytics.exe
Files
-
42b5d65b10d1122ba29aab15c3dab9ed7ae897d33ae2afc3225da7d600e30f86_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
a8ebc01b3e25f02afd5bbfa6e4e9181d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
SetHandleCount
GetStdHandle
HeapDestroy
HeapSize
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
TerminateProcess
GetACP
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
TlsSetValue
TlsGetValue
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetSystemTime
HeapReAlloc
GetLocalTime
ExitProcess
GetTimeZoneInformation
RaiseException
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapFree
GetFileType
GetCurrentDirectoryA
SetErrorMode
GetFileSize
SystemTimeToFileTime
LocalFileTimeToFileTime
GlobalSize
lstrcpyW
CopyFileA
GetProcessVersion
GetOEMCP
GetCPInfo
SetUnhandledExceptionFilter
LCMapStringA
LocalReAlloc
WriteFile
lstrcpyA
CreateFileA
SetupComm
SetCommTimeouts
CreateThread
GetCommState
SetCommState
EscapeCommFunction
PurgeComm
CreateEventA
SetCommMask
Sleep
WaitCommEvent
CloseHandle
ClearCommError
ReadFile
GetLastError
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
GetProfileStringA
TlsAlloc
InitializeCriticalSection
SizeofResource
GlobalFlags
GetTempPathA
GetShortPathNameA
GetCurrentThread
GetModuleFileNameA
GetVolumeInformationA
GetThreadLocale
GetStringTypeExA
DeleteFileA
FindFirstFileA
FindClose
UnlockFile
MoveFileA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
FileTimeToLocalFileTime
GetCurrentProcess
DuplicateHandle
GetProfileIntA
FileTimeToSystemTime
GetTickCount
GetPrivateProfileStringA
lstrcmpA
WritePrivateProfileStringA
SetLastError
GetPrivateProfileIntA
MulDiv
GetDiskFreeSpaceA
FormatMessageA
LocalFree
GetFullPathNameA
GetFileTime
SetFileTime
InterlockedIncrement
GetTempFileNameA
GetFileAttributesA
lstrlenW
InterlockedDecrement
GlobalAlloc
lstrcpynA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
lstrlenA
lstrcatA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
GlobalLock
GlobalFindAtomA
GlobalDeleteAtom
LockResource
GlobalUnlock
GlobalFree
GetProcAddress
FindResourceA
LoadResource
LoadLibraryA
GetVersion
GetModuleHandleA
FreeLibrary
GetOverlappedResult
user32
IsZoomed
PostQuitMessage
ShowOwnedPopups
ValidateRect
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
WindowFromDC
RemoveMenu
InsertMenuA
GetMenuStringA
DestroyCursor
FillRect
FindWindowA
GetClassNameA
GetSysColorBrush
GetDCEx
InvertRect
LockWindowUpdate
DestroyIcon
CharNextA
GetNextDlgGroupItem
GetTabbedTextExtentA
GetMessageA
TranslateMessage
WindowFromPoint
GetWindowThreadProcessId
GetCursorPos
WaitMessage
SetCapture
CreateMenu
PostThreadMessageA
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
BeginPaint
GetWindowDC
ClientToScreen
CopyAcceleratorTableA
IsClipboardFormatAvailable
IsRectEmpty
InSendMessage
UnpackDDElParam
ReuseDDElParam
GetDesktopWindow
ReleaseCapture
LoadAcceleratorsA
SetRectEmpty
RedrawWindow
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetSystemMenu
CharUpperA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetFocus
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
ClipCursor
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetCaretPos
DrawFrameControl
DrawStateA
DrawFocusRect
GetSysColor
CopyImage
CopyRect
LoadBitmapA
InvalidateRect
SetClassLongA
GetMenuItemID
GetFocus
GetClientRect
SetParent
DeleteMenu
AppendMenuA
LoadIconA
GetScrollRange
MessageBeep
LoadMenuA
GetMenu
SetMenu
DestroyMenu
UpdateWindow
KillTimer
GetDC
ReleaseDC
GetMessagePos
ScreenToClient
PtInRect
CreateCaret
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
DrawEdge
InflateRect
SetTimer
GetWindowRect
GetSystemMetrics
LoadCursorA
SetCursor
MessageBoxA
wsprintfA
SetRect
GetParent
SendMessageA
EnableWindow
EqualRect
AdjustWindowRectEx
EndPaint
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
UnregisterClassA
gdi32
ExtTextOutA
ScaleWindowExtEx
SelectClipRgn
SetWindowExtEx
IntersectClipRect
ExcludeClipRect
LineTo
SetTextAlign
MoveToEx
GetCurrentPositionEx
CreateRectRgn
CreateFontA
GetViewportExtEx
CreatePatternBrush
PtVisible
RectVisible
Escape
StretchDIBits
TextOutA
GetCharWidthA
SetBrushOrgEx
CreateCompatibleBitmap
EndDoc
EndPage
AbortDoc
DPtoLP
SetAbortProc
StartPage
GetViewportOrgEx
CreateDCA
PatBlt
DeleteMetaFile
CloseMetaFile
LPtoDP
CreateFontIndirectA
CopyMetaFileA
CreateMetaFileA
SetRectRgn
CombineRgn
GetMapMode
UnrealizeObject
GetTextColor
CreateRectRgnIndirect
GetNearestColor
GetStretchBltMode
GetBkColor
GetTextAlign
GetBkMode
GetPolyFillMode
GetTextFaceA
GetROP2
SetWindowOrgEx
ScaleViewportExtEx
GetTextExtentPointA
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetStretchBltMode
SetROP2
SetMapMode
SetBkMode
SetPolyFillMode
RestoreDC
SaveDC
SelectObject
DeleteDC
GetWindowOrgEx
StartDocA
CreateBitmap
SetBkColor
GetWindowExtEx
GetClipBox
SetTextColor
GetTextExtentPoint32A
CreateSolidBrush
Rectangle
CreateCompatibleDC
BitBlt
DeleteObject
Ellipse
CreatePen
GetObjectA
GetDeviceCaps
GetStockObject
GetTextMetricsA
CreateDIBitmap
comdlg32
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
GetFileSecurityA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
SetFileSecurityA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
shell32
SHGetFileInfoA
ExtractIconA
DragFinish
DragAcceptFiles
DragQueryFileA
comctl32
ord8
ord17
oledlg
ord5
ord3
ord7
ord1
ord8
ole32
CoLockObjectExternal
RevokeDragDrop
CoRegisterClassObject
CoRevokeClassObject
RegisterDragDrop
CLSIDFromProgID
CLSIDFromString
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoDisconnectObject
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
GetRunningObjectTable
WriteClassStg
CoGetMalloc
CreateBindCtx
CoTaskMemAlloc
ReadFmtUserTypeStg
ReadClassStg
CreateOleAdviseHolder
CreateDataAdviseHolder
OleDuplicateData
SetConvertStg
WriteFmtUserTypeStg
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
IsAccelerator
OleFlushClipboard
OleIsRunning
OleGetIconOfClass
CoGetClassObject
CoRegisterMessageFilter
ReleaseStgMedium
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CoTaskMemFree
OleSetMenuDescriptor
OleTranslateAccelerator
OleRun
CreateGenericComposite
OleGetClipboard
OleIsCurrentClipboard
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CoTreatAsClass
olepro32
ord253
oleaut32
VariantTimeToSystemTime
LoadTypeLi
SysStringLen
VariantCopy
VarDateFromStr
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantClear
VariantChangeType
SysAllocStringLen
Sections
.text Size: 424KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ