Static task
static1
Behavioral task
behavioral1
Sample
62c38de8762ad005fa1f3c796bbd2473fb506ddd3b9acf1be6cd1e0516608979_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
62c38de8762ad005fa1f3c796bbd2473fb506ddd3b9acf1be6cd1e0516608979_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
62c38de8762ad005fa1f3c796bbd2473fb506ddd3b9acf1be6cd1e0516608979_NeikiAnalytics.exe
-
Size
2.4MB
-
MD5
6e0072747eb690d3d778f688e0ef8240
-
SHA1
23eab1dc7e8affaa4ab8e0ab92d8b2526a25b012
-
SHA256
62c38de8762ad005fa1f3c796bbd2473fb506ddd3b9acf1be6cd1e0516608979
-
SHA512
1965cf84cd16afe885a8e758507e1f458b975ffec5ea9a99ee2c0d7851dadd636a013eb9fda2c6940a9fd40fe98f44548e89ce407671dedf7730ec063fab0a77
-
SSDEEP
24576:sTl+zAS/FV1qJ1z0eeOCFcIDmIzEnBLxLNt01aVQf3jqGxvparo3:ql+zxq7UOCFTzE3Bt0kVQfGGxBaro3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62c38de8762ad005fa1f3c796bbd2473fb506ddd3b9acf1be6cd1e0516608979_NeikiAnalytics.exe
Files
-
62c38de8762ad005fa1f3c796bbd2473fb506ddd3b9acf1be6cd1e0516608979_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
e3783e80148af3c80f01b913238857bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
trayicon2
CreateTrayManager
DestroyTrayManager
tmpdlg10
ord4
ord1
ord2
ord5
ord6
spell32
ord4
rps32
ord13
ord11
ord8
ord2
ord9
rds32
ord10
ord8
ord2
ord9
drs32
ord9
ord8
ord10
ord2
ter32
ord68
ord121
ord105
ord135
ord33
ord50
ord175
ord51
ord321
ord196
ord162
ord43
ord106
ord10
ord126
ord65
ord90
ord164
ord161
ord186
ord108
ord59
ord357
ord14
ord13
ord109
ord44
ord526
ord223
ord54
ord47
ord75
ord60
ord92
ord98
ord17
ord82
ord12
ord97
ord18
ord64
ord524
ord525
ord53
ord55
ord11
ord15
ord32
ord42
ord16
ord24
ord79
ord67
ord40
ord28
ord48
ord31
ord30
ord29
ord52
ord205
ord58
ord129
ord128
ord193
ord468
ord99
ord49
ord120
ord87
ord208
kernel32
GetShortPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrlenW
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventA
GetCurrentThread
GetTickCount
SearchPathA
GlobalFlags
SizeofResource
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
lstrcpyW
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
SetEnvironmentVariableA
RaiseException
GetSystemTimeAsFileTime
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetFileType
SetStdHandle
GetACP
HeapReAlloc
CreateThread
ExitThread
HeapSize
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
GetThreadLocale
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
GetStringTypeExA
UnlockFile
LockFile
FlushFileBuffers
WriteFile
GetCurrentProcess
DuplicateHandle
FormatMessageA
LocalFree
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
_lclose
_llseek
_lwrite
_lread
GetComputerNameA
GetLocaleInfoA
GetDateFormatA
GetCurrentDirectoryA
GlobalFree
GlobalUnlock
GlobalHandle
GetTempFileNameA
GlobalLock
GlobalAlloc
EnumTimeFormatsA
EnumDateFormatsA
GetUserDefaultLCID
GetLocalTime
GetTimeFormatA
lstrcpyA
GetVolumeInformationA
SetErrorMode
GetTempPathA
FindClose
FindNextFileA
FindFirstFileA
GetDriveTypeA
GetDiskFreeSpaceA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
GetVersionExA
MulDiv
lstrcmpA
Sleep
CopyFileA
MoveFileA
GetVersion
lstrcatA
lstrlenA
MultiByteToWideChar
FreeLibrary
LoadLibraryA
GlobalFindAtomA
GlobalDeleteAtom
LockResource
FindResourceA
LoadResource
GetFileSize
ReadFile
ExitProcess
GetProfileStringA
GetProfileIntA
lstrcpynA
SetCurrentDirectoryA
GetModuleHandleA
SetFilePointer
SetEndOfFile
GetModuleFileNameA
GlobalReAlloc
GetFileAttributesA
GetEnvironmentVariableA
GetProcAddress
GetSystemDirectoryA
GlobalSize
GetLastError
CreateProcessA
WaitForSingleObject
GetLogicalDriveStringsA
GetFullPathNameA
GetLogicalDrives
GetWindowsDirectoryA
WinExec
CloseHandle
DeviceIoControl
CreateFileA
FreeEnvironmentStringsA
user32
InvertRect
GetSystemMenu
SetParent
GetNextDlgGroupItem
CharNextA
PostThreadMessageA
DestroyIcon
LockWindowUpdate
GetDCEx
GetSysColorBrush
SetCursorPos
DestroyCursor
SetWindowContextHelpId
RegisterClipboardFormatA
ShowOwnedPopups
PostQuitMessage
GetMessageA
ValidateRect
MapDialogRect
CopyAcceleratorTableA
InSendMessage
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
LoadAcceleratorsA
DefMDIChildProcA
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
CharUpperA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
ShowWindow
SetWindowTextA
IsDlgButtonChecked
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetWindowPlacement
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
SendMessageA
EnableWindow
GetWindowRect
InvalidateRect
GetSysColor
GetSystemMetrics
CloseClipboard
EmptyClipboard
IsIconic
GetClientRect
OpenClipboard
GetParent
MessageBoxA
GetWindowLongA
PostMessageA
CreateWindowExA
DestroyWindow
EndDialog
wvsprintfA
wsprintfA
LoadStringA
ChangeDisplaySettingsA
EnumDisplaySettingsA
LoadImageA
IsClipboardFormatAvailable
CallWindowProcA
IsWindowVisible
SetWindowRgn
UnhookWindowsHookEx
GetForegroundWindow
GetWindowDC
GetScrollRange
GetScrollInfo
SetScrollInfo
WindowFromPoint
SubtractRect
EqualRect
IsRectEmpty
IntersectRect
SetRectEmpty
GetDialogBaseUnits
GetDesktopWindow
SetWindowLongA
SetMenuItemInfoA
DrawStateA
OffsetRect
SystemParametersInfoA
GetMenuItemInfoA
DrawTextA
GetWindow
GetClassNameA
DeleteMenu
InsertMenuA
DrawMenuBar
SetKeyboardState
IsZoomed
EnumChildWindows
GetClipboardData
GetCursorPos
GetKeyState
GetAsyncKeyState
GetKeyboardState
ModifyMenuA
GetMenuItemID
GetCaretPos
ReleaseDC
SetWindowPos
ClientToScreen
GetMenu
RemoveMenu
RedrawWindow
GetMenuStringA
RegisterWindowMessageA
ReleaseCapture
MessageBeep
PtInRect
SetRect
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
InvalidateRgn
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
DrawIconEx
DrawFrameControl
CreatePopupMenu
FrameRect
InflateRect
LoadBitmapA
FillRect
DrawEdge
GetCapture
SetCapture
IsWindow
DestroyCaret
CopyRect
GetFocus
MoveWindow
GetSubMenu
LoadMenuA
ShowCaret
LoadIconA
SetWindowsHookExA
CallNextHookEx
SetCursor
SetClipboardData
UpdateWindow
LoadCursorA
GetDC
SetTimer
KillTimer
GetMessagePos
ScreenToClient
CopyIcon
DrawIcon
DrawFocusRect
SetDlgItemTextA
GetDlgItemTextA
DispatchMessageA
TranslateMessage
PeekMessageA
DefWindowProcA
FindWindowA
GetLastActivePopup
SetForegroundWindow
EnumWindows
GetWindowTextA
IsDialogMessageA
AppendMenuA
EnableMenuItem
GetMenuItemCount
GetTopWindow
gdi32
CreateRectRgn
CreateRectRgnIndirect
ExtTextOutA
SaveDC
RestoreDC
SelectObject
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetViewportExtEx
GetWindowExtEx
PtVisible
CombineRgn
TextOutA
Escape
GetWindowOrgEx
GetViewportOrgEx
GetCharWidthA
CopyMetaFileA
LPtoDP
GetTextFaceA
SetTextColor
SetBkColor
SetBkMode
CreateICA
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
CreateCompatibleBitmap
DeleteDC
EndDoc
AbortDoc
EndPage
StartPage
StartDocA
ResetDCA
CreatePen
GetBkColor
CreateFontIndirectA
GetObjectA
Rectangle
PatBlt
CreateCompatibleDC
GetDeviceCaps
GetTextColor
DPtoLP
BitBlt
EnumFontFamiliesA
CreateFontA
GetTextMetricsA
SetRectRgn
CreatePatternBrush
GetMapMode
RectVisible
GetClipBox
StretchDIBits
GetTextExtentPoint32A
CreateSolidBrush
CreateDCA
CreateDIBitmap
GetNearestColor
Polyline
Polygon
DeleteObject
RealizePalette
SetPaletteEntries
GetRgnBox
PtInRegion
FillRgn
RectInRegion
StretchBlt
PaintRgn
SelectPalette
CreatePalette
GetSystemPaletteEntries
SetDIBitsToDevice
SetStretchBltMode
GetStockObject
GetDIBits
CreateBitmap
CreateHalftonePalette
GetPaletteEntries
GetTextExtentPointA
ExtCreatePen
comdlg32
ChooseFontA
FindTextA
ChooseColorA
GetFileTitleA
PrintDlgA
ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegUnLoadKeyA
RegSetKeySecurity
RegSaveKeyA
RegRestoreKeyA
RegReplaceKeyA
RegNotifyChangeKeyValue
RegLoadKeyA
RegGetKeySecurity
RegFlushKey
RegEnumValueA
RegEnumKeyExA
RegConnectRegistryA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCloseKey
shell32
DragQueryPoint
SHBrowseForFolderA
FindExecutableA
SHGetPathFromIDListA
ShellExecuteA
SHGetFileInfoA
SHGetMalloc
DragAcceptFiles
DragFinish
ExtractIconA
SHGetSpecialFolderLocation
DragQueryFileA
comctl32
ImageList_DragMove
ImageList_BeginDrag
ImageList_AddMasked
ImageList_GetBkColor
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_SetBkColor
ord17
ImageList_Draw
ImageList_Add
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragLeave
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Read
ImageList_Write
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_EndDrag
ord8
oledlg
ord8
ole32
OleGetClipboard
CoDisconnectObject
CoTreatAsClass
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
CoUninitialize
CoInitialize
CoGetClassObject
CoLockObjectExternal
WriteClassStg
GetRunningObjectTable
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleSetMenuDescriptor
OleIsRunning
OleRun
OleFlushClipboard
CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleGetIconOfClass
ReleaseStgMedium
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSave
OleLoad
OleCreateStaticFromData
OleSetContainedObject
StringFromCLSID
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CoTaskMemFree
CoCreateInstance
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
olepro32
ord253
oleaut32
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantInit
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
VarBstrFromCy
Sections
.rdata Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 451KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ