Static task
static1
Behavioral task
behavioral1
Sample
22c6b94e6e95abfc2cb4f64852e9b19befa178b39bd637a115f62e6768f9c9f3_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
22c6b94e6e95abfc2cb4f64852e9b19befa178b39bd637a115f62e6768f9c9f3_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
22c6b94e6e95abfc2cb4f64852e9b19befa178b39bd637a115f62e6768f9c9f3_NeikiAnalytics.exe
-
Size
7.2MB
-
MD5
2dbeddf16d0657b91beaf83ce0a843f0
-
SHA1
0da7bb956d143069e9b872b65131f28954984d59
-
SHA256
22c6b94e6e95abfc2cb4f64852e9b19befa178b39bd637a115f62e6768f9c9f3
-
SHA512
b6ba67cbb3901a511265f02ca679728496a13dba21df7024b6f81cf164732ee69cfa13d76ad4245abd183c99842f9ca9e0965407b3bbad3d26546a5af430537d
-
SSDEEP
196608:ZdfN4l6urhKp5+CCb47uD481ug7Vm1WGWaaB5NenKxV:Z4l1rh0CM704EuysI0nKj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22c6b94e6e95abfc2cb4f64852e9b19befa178b39bd637a115f62e6768f9c9f3_NeikiAnalytics.exe
Files
-
22c6b94e6e95abfc2cb4f64852e9b19befa178b39bd637a115f62e6768f9c9f3_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
ecc3a504d40986550cc0121c757aee13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasGetConnectStatusA
user32
KillTimer
gdi32
RectVisible
winspool.drv
DocumentPropertiesA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
VariantChangeType
comctl32
ImageList_ReplaceIcon
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
Sections
.text Size: 1.5MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE