Static task
static1
Behavioral task
behavioral1
Sample
24fe8a9d7a3cf8950ea0e04953f8f334edf1c9050721cac3c47ba532f5f8a62c_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
24fe8a9d7a3cf8950ea0e04953f8f334edf1c9050721cac3c47ba532f5f8a62c_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
24fe8a9d7a3cf8950ea0e04953f8f334edf1c9050721cac3c47ba532f5f8a62c_NeikiAnalytics.exe
-
Size
152KB
-
MD5
9bbb86c13cfb3ae2430e4ebdf3beb9b0
-
SHA1
0e9c577cdfedd7c3e9b059249631d1bd19f9d248
-
SHA256
24fe8a9d7a3cf8950ea0e04953f8f334edf1c9050721cac3c47ba532f5f8a62c
-
SHA512
a0832bdb9e3d0851f48bc16c50731b76be4524974bf4139dcb1f6aa576573d96b1f5be096b2c7900f5cb0af12ce277bdaf91de0b83951295d31603af9ae09e7f
-
SSDEEP
3072:VbS4zXWDkt908ZRdP80eHv+Es2+oXXTglWG6hcIZ:dS0XBl3Cv2mHTvhcIZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24fe8a9d7a3cf8950ea0e04953f8f334edf1c9050721cac3c47ba532f5f8a62c_NeikiAnalytics.exe
Files
-
24fe8a9d7a3cf8950ea0e04953f8f334edf1c9050721cac3c47ba532f5f8a62c_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
2a3d834e9e1bff4a45d3f1abbdbb930e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
comdlg32
GetOpenFileNameA
PrintDlgA
GetSaveFileNameA
gdi32
CreateFontA
GetTextExtentPoint32A
EndDoc
EndPage
DeleteObject
CreateCompatibleBitmap
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
SetTextColor
CreateHatchBrush
CreateSolidBrush
CreatePen
IntersectClipRect
SelectClipRgn
ExtTextOutW
SetBkMode
GetTextExtentPoint32W
GetTextMetricsA
CreateFontIndirectA
Rectangle
SetPixel
Polyline
Ellipse
GetStockObject
Polygon
SetMapMode
StartDocA
StartPage
GetDeviceCaps
user32
LoadIconA
MessageBeep
TranslateMessage
BeginPaint
IntersectRect
EndPaint
PostQuitMessage
ReleaseCapture
SetCapture
DefWindowProcA
CreateMenu
AppendMenuA
SetMenu
GetKeyboardState
EnableMenuItem
CheckMenuItem
DrawMenuBar
CheckDlgButton
DefDlgProcA
LoadCursorA
RegisterClassA
EnableWindow
ShowWindow
IsDialogMessageA
DispatchMessageA
GetMessageA
SetForegroundWindow
DestroyWindow
SendMessageA
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageA
GetWindowLongA
CreateWindowExA
SetWindowLongA
SystemParametersInfoA
GetClientRect
AdjustWindowRectEx
GetMenu
SetRect
GetMenuItemCount
GetMenuItemRect
UnionRect
SetWindowPos
GetWindowRect
WinHelpA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetTimer
KillTimer
OffsetRect
InvalidateRect
GetSysColor
GetDC
ReleaseDC
SetWindowTextA
MessageBoxA
DestroyMenu
kernel32
InterlockedExchange
SetEndOfFile
RtlUnwind
CreateFileA
SetStdHandle
HeapSize
SetFilePointer
GetLocaleInfoA
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
GetCPInfo
CompareStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
FlushFileBuffers
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
ReadFile
WriteFile
CloseHandle
RaiseException
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
GetModuleHandleA
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
MulDiv
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
FormatMessageA
GetLastError
GetLocalTime
MultiByteToWideChar
GetTickCount
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ