Static task
static1
Behavioral task
behavioral1
Sample
7275be3a60f3b10a29fbad809d2c069d6b65a5e251ccf3af2f2bcc8a3b2b8101_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7275be3a60f3b10a29fbad809d2c069d6b65a5e251ccf3af2f2bcc8a3b2b8101_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
7275be3a60f3b10a29fbad809d2c069d6b65a5e251ccf3af2f2bcc8a3b2b8101_NeikiAnalytics.exe
-
Size
744KB
-
MD5
7e8483071c52dfb360b9b5a69d50c3b0
-
SHA1
d91d3447203fc9295acca7654382bef2016db8d9
-
SHA256
7275be3a60f3b10a29fbad809d2c069d6b65a5e251ccf3af2f2bcc8a3b2b8101
-
SHA512
357b47c34735dc932a85d3d425ebf57f8e2f6b63a35c594829cbe0a517a60a3899bf72b9c6afb3ff3cddaff329ee0af36f14eea156a77cbd08bb3b229ea826de
-
SSDEEP
12288:iB1dhwvRL0S8PgKDWW02xxTOQaPZCTjUzGi4xNcDnZE9pkZ4JiT:ghe0S8YAWW02x1OQIg3QGi4xNcDZE442
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7275be3a60f3b10a29fbad809d2c069d6b65a5e251ccf3af2f2bcc8a3b2b8101_NeikiAnalytics.exe
Files
-
7275be3a60f3b10a29fbad809d2c069d6b65a5e251ccf3af2f2bcc8a3b2b8101_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
75c3811b239a6c75e270610d830e276d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
SetErrorMode
LoadLibraryA
GetACP
IsDBCSLeadByte
GetCPInfo
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
CreateProcessA
WaitForMultipleObjects
CreateThread
GetLastError
ExitThread
WinExec
CopyFileA
WriteFile
SetEndOfFile
DeleteFileA
GetVersionExA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
CloseHandle
GetStartupInfoA
GetCommandLineA
GlobalUnlock
GlobalLock
lstrlenA
GetModuleHandleA
ExitProcess
GetProcAddress
GlobalAlloc
QueryPerformanceCounter
GlobalFree
user32
ClientToScreen
DeleteMenu
LoadMenuA
ScreenToClient
TrackPopupMenu
WindowFromPoint
GetCursorPos
FillRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
SetCursor
EndPaint
BeginPaint
MessageBoxA
PostMessageA
GetDlgItem
GetWindowTextLengthA
GetDlgItemTextA
EnableWindow
GetWindowLongA
GetClientRect
CheckMenuItem
DestroyMenu
SetMenu
InvalidateRect
MoveWindow
DialogBoxParamA
EndDialog
GetSubMenu
EnableMenuItem
DefWindowProcA
DestroyWindow
PostQuitMessage
LoadStringA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetWindow
GetWindowRect
SetWindowPos
GetKeyState
GetClipboardData
GetMenu
SetWindowLongA
GetDesktopWindow
OpenClipboard
SetClipboardData
CloseClipboard
GetDC
ReleaseDC
SetFocus
SetDlgItemTextA
GetCapture
gdi32
CreatePalette
SetTextAlign
SetDIBitsToDevice
GdiFlush
StretchDIBits
DeleteObject
CreateCompatibleBitmap
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
BitBlt
EnumFontFamiliesA
LineTo
MoveToEx
SetBkColor
GetBkColor
SetBkMode
GetBkMode
ExtTextOutA
GetTextExtentPoint32A
CreatePen
Rectangle
GetStockObject
CreateSolidBrush
SetTextColor
GetTextMetricsA
CreateFontIndirectA
RealizePalette
SelectPalette
GetClipBox
SaveDC
SelectObject
RestoreDC
GetSystemPaletteEntries
IntersectClipRect
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegQueryValueA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegCloseKey
RegQueryValueExA
shell32
DragAcceptFiles
DragQueryFileA
winmm
waveOutPrepareHeader
waveOutUnprepareHeader
timeKillEvent
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutReset
timeSetEvent
waveOutOpen
waveOutGetDevCapsA
waveOutClose
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ