Static task
static1
Behavioral task
behavioral1
Sample
49688c7f317045eb6e255909431feb7f73d7298b025311833b6c6585b061edd8_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
49688c7f317045eb6e255909431feb7f73d7298b025311833b6c6585b061edd8_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
49688c7f317045eb6e255909431feb7f73d7298b025311833b6c6585b061edd8_NeikiAnalytics.exe
-
Size
60KB
-
MD5
693d16391b79831596a53bf15e2f76b0
-
SHA1
9db858db52983e22a7604063c00b1dd9e7471036
-
SHA256
49688c7f317045eb6e255909431feb7f73d7298b025311833b6c6585b061edd8
-
SHA512
c77939f2d85f9ed9aa35a7e7daa15f0c1950cbbfcb496916c938e59819816875df006b2f4950e0a90322be107ca475e837bfa0bc36571e30bcec53693c6191e0
-
SSDEEP
768:PUKXLCqkoPm49Sa6oq9VRU4DdNgJQ3waY+X/I82OqolNkzV2Pvf2nJTJVmT:PHLjmXtoqD/DdrAaXA8T7vtfUJTJVm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49688c7f317045eb6e255909431feb7f73d7298b025311833b6c6585b061edd8_NeikiAnalytics.exe
Files
-
49688c7f317045eb6e255909431feb7f73d7298b025311833b6c6585b061edd8_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f6f0c651a4338f32b81b234742f54f30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
GetPrivateProfileIntA
lstrlenA
lstrcatA
GetPrivateProfileStringA
CreateProcessA
GetModuleFileNameA
lstrcpyA
FreeEnvironmentStringsA
HeapDestroy
GetFileType
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
CloseHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
user32
MessageBoxA
wsprintfA
GetKeyState
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE