Static task
static1
Behavioral task
behavioral1
Sample
5328755067a6f14e62f23ab2ab3d125d4ad2767ca504475b89eed60d2895a59a_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5328755067a6f14e62f23ab2ab3d125d4ad2767ca504475b89eed60d2895a59a_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5328755067a6f14e62f23ab2ab3d125d4ad2767ca504475b89eed60d2895a59a_NeikiAnalytics.exe
-
Size
632KB
-
MD5
f7fbfa0cf773d1b3e8c950826a97f9c0
-
SHA1
324677b9eee7af6373ed06770e702dffe5ec9465
-
SHA256
5328755067a6f14e62f23ab2ab3d125d4ad2767ca504475b89eed60d2895a59a
-
SHA512
d6c9ac6e8ccd89a51e738ac5b54b26dea2eb88d1f8e0b3097bfca64c8982bb1d6537590790986f13e58880027a4123a27564e19039a3e5528d6200d01d57f068
-
SSDEEP
12288:/kx3XHMWOhZDOq6if4CeWZvNmA8QohX2Jnz9T4haf1QDvm93unuvta1qCYyKtDmY:/QnsdvDB684RW1mpBJ+nz9T4haf1QDv+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5328755067a6f14e62f23ab2ab3d125d4ad2767ca504475b89eed60d2895a59a_NeikiAnalytics.exe
Files
-
5328755067a6f14e62f23ab2ab3d125d4ad2767ca504475b89eed60d2895a59a_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
6313ec461411e3b6ef71921f1b83dab0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
SetErrorMode
SetConsoleCtrlHandler
SetLastError
GetCommandLineA
RaiseException
GetFileType
GetLocalTime
GetProcessTimes
GetCurrentProcess
GetLastError
SetFilePointer
VirtualAlloc
VirtualFree
GetVersionExA
CloseHandle
GetStdHandle
FormatMessageA
DebugBreak
FreeLibrary
GetCurrentThread
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualQuery
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
SetEndOfFile
WriteFile
Sleep
ReadFile
GetTempFileNameA
GetTempPathA
GetFullPathNameA
GetFileInformationByHandle
DeleteFileA
WaitForSingleObject
SetThreadPriority
CreateProcessA
Beep
SetLocalTime
FlushFileBuffers
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
MultiByteToWideChar
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadWritePtr
GetCPInfo
GetOEMCP
WriteConsoleA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetFileAttributesA
CompareStringA
CompareStringW
SetStdHandle
GetExitCodeProcess
Sections
.text Size: 412KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 102.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ