Static task
static1
Behavioral task
behavioral1
Sample
322f58dd4099da7323fc1f77e41a668bcc475be1875b708204fde52aa2b5a8f1_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
322f58dd4099da7323fc1f77e41a668bcc475be1875b708204fde52aa2b5a8f1_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
322f58dd4099da7323fc1f77e41a668bcc475be1875b708204fde52aa2b5a8f1_NeikiAnalytics.exe
-
Size
50KB
-
MD5
e96d5d91f99c1521389b87218ae62e60
-
SHA1
3dc428cb881f8f5ee2859db2a10626233169c74e
-
SHA256
322f58dd4099da7323fc1f77e41a668bcc475be1875b708204fde52aa2b5a8f1
-
SHA512
4a448ad63a2705cea03c2c5572a6363cae9ebdfd6f478b3db7b0ba0ac53b6fecaa648055945e6a20566969c5e2d246e9af3f5570106e47c8773f202d911317b4
-
SSDEEP
384:/mAZdyex1lgvsn1vb0pnYV7cfWP94wBo0UB//fmotXO9Pj9TtYrbLFfS/3WUu6TS:eAZnlkuvINW7Wwe/2oU9YrbLw/3WUu2S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 322f58dd4099da7323fc1f77e41a668bcc475be1875b708204fde52aa2b5a8f1_NeikiAnalytics.exe
Files
-
322f58dd4099da7323fc1f77e41a668bcc475be1875b708204fde52aa2b5a8f1_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
9974ce126c3ed54c3c16f1024c9be8a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
orauts
GetProcAddress
WSAStartup
WSAGetLastError
WSACleanup
GetModuleHandleA
GetLastError
CreateThread
WaitForSingleObject
GetCurrentThreadId
CloseHandle
CreateFileA
FreeLibrary
LoadLibraryA
Sleep
GetExitCodeThread
kernel32
GetLocalTime
GetCurrentProcess
GlobalMemoryStatus
FormatMessageA
LocalFree
GetCurrentProcessId
lstrlenA
GetLogicalDriveStringsA
GetDriveTypeA
GetVolumeInformationA
GetDiskFreeSpaceA
SetUnhandledExceptionFilter
GetSystemInfo
lstrcmpiA
GetVersionExA
GetDiskFreeSpaceExA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
msvcrt
realloc
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
malloc
fprintf
_iob
_strdup
localtime
time
sprintf
printf
getenv
free
calloc
_strcmpi
_except_handler3
_ftol
exit
_stricmp
qsort
atoi
wprintf
wcscmp
_wcsicmp
_assert
wcscpy
ws2_32
gethostname
gethostbyname
inet_ntoa
pdh
PdhOpenQueryA
PdhAddCounterA
PdhMakeCounterPathA
PdhParseInstanceNameA
PdhLookupPerfNameByIndexA
PdhEnumObjectItemsA
PdhGetRawCounterValue
PdhGetCounterTimeBase
PdhGetFormattedCounterValue
PdhRemoveCounter
PdhCloseQuery
PdhCollectQueryData
netapi32
NetWkstaUserEnum
NetApiBufferFree
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ