mini_installer_patch_3stage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
018cd902d503b2ee351b40a1a093451bbce837562455b660d8faa5e5b9e23a97_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
018cd902d503b2ee351b40a1a093451bbce837562455b660d8faa5e5b9e23a97_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
018cd902d503b2ee351b40a1a093451bbce837562455b660d8faa5e5b9e23a97_NeikiAnalytics.exe
-
Size
948KB
-
MD5
54a44f3c82b4e9c7dace323d7cffac30
-
SHA1
9990b06f1920eaabf334b5ecb12acb2c174e9625
-
SHA256
018cd902d503b2ee351b40a1a093451bbce837562455b660d8faa5e5b9e23a97
-
SHA512
c03a1a5405b3c8e3af2297684afb997d23ea06b367bff649165a0eef5882a983f172aece6e6b668e9202d7501c1742a4a55696ade99bada63f1e7b87f3846cb7
-
SSDEEP
24576:lzK65dvDLSDtd1gU3FlDzUABY5SQ0mUFUoFZwR1uRt6:xdvZU1lDzU7AQ0ZFUoPI1GY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 018cd902d503b2ee351b40a1a093451bbce837562455b660d8faa5e5b9e23a97_NeikiAnalytics.exe
Files
-
018cd902d503b2ee351b40a1a093451bbce837562455b660d8faa5e5b9e23a97_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
8e5e2eb068d303a72252fb9c94095513
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
kernel32
LocalFree
LockResource
SizeofResource
LoadResource
FindResourceW
lstrcmpiW
GetCommandLineW
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ReadFile
WriteFile
CloseHandle
SetFilePointer
CreateFileW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetProcAddress
LoadLibraryExW
ExpandEnvironmentStringsW
lstrlenW
GetExitCodeProcess
WaitForSingleObject
GetLastError
CreateProcessW
RemoveDirectoryW
DeleteFileW
CreateDirectoryW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameW
MoveFileExW
EnumResourceNamesW
GetTempPathW
FindFirstFileExW
SetProcessWorkingSetSize
GetCurrentProcess
ExitProcess
GetModuleHandleW
shell32
CommandLineToArgvW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 921KB - Virtual size: 921KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ