Static task
static1
Behavioral task
behavioral1
Sample
70d5347e8cce797baba87fdf998c299a242e6f538e2f24644d46823c828cd47b_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
70d5347e8cce797baba87fdf998c299a242e6f538e2f24644d46823c828cd47b_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
70d5347e8cce797baba87fdf998c299a242e6f538e2f24644d46823c828cd47b_NeikiAnalytics.exe
-
Size
420KB
-
MD5
dfd3ba4dc6467d90457c541c1e20ca90
-
SHA1
1f011abe76f12301e1bbd44a92743109756eee86
-
SHA256
70d5347e8cce797baba87fdf998c299a242e6f538e2f24644d46823c828cd47b
-
SHA512
48b6316142b718c98963cf8d11a43e45a406b52aa63e8bf729d7ddc12bc9088b5ae96438ac0d26b0fdbd3aecebabaa79efed5ec9f33033d1601d8559f297893d
-
SSDEEP
3072:6oZBPVHTYhFro0tCrwkoyrwko8R3QbRw0s4sR3XcOf7u5n65ZGSrgL5f:pZBPUrhkoXko8R3Q1w0s4I3Xtu5n653
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70d5347e8cce797baba87fdf998c299a242e6f538e2f24644d46823c828cd47b_NeikiAnalytics.exe
Files
-
70d5347e8cce797baba87fdf998c299a242e6f538e2f24644d46823c828cd47b_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
9df71bc4ed03e74fce169863864cc073
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
kernel32
ExitProcess
GetModuleFileNameA
GetModuleHandleA
lstrlenA
OpenEventA
GetCurrentProcessId
InitializeCriticalSection
CloseHandle
DeleteCriticalSection
SetLastError
TlsGetValue
GetLastError
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetStartupInfoA
GetCommandLineA
CreateEventA
WaitForMultipleObjects
LoadLibraryA
LocalAlloc
LocalFree
FreeLibrary
CreateMutexA
ReleaseMutex
OpenMutexA
cvirte
putc
_UP_GetTableCellRingValueLengthFromIndex
_UP_CVITimeIntervalToTimeUnit
GetMouseCursor
putchar
CloseCom
RegisterTCPServer
puts
CloseWinsock
GetNextFile
qsort
RegisterTCPServerEx
_UP_CVI_CloseFile
raise
Cls
_UP_GetTableCellValLength
GetNumAxisItems
rand
CmtDiscardLock
_UP_CVI_CopyFile
RegisterWinMsgCallback
read
GetNumCheckedItems
_UP_GetTableColumnFromLabel
CmtDiscardTSQ
realloc
_UP_CVI_DeleteFile
ReleaseCVILogTimingHandle
remove
GetNumCtrlArrayItems
CmtDiscardTSV
rename
_UP_CVI_GetFileSize
_UP_GetTableRowFromLabel
rewind
CmtDiscardThreadLocalVar
ReleaseExternalModule
GetNumImagesInFile
scanf
_UP_CVI_GetFileTime
setbuf
_UP_GetTableSelection
GetNumLegendItems
CmtDiscardThreadPool
RemoveCtrlFromSplitter
setjmp
_UP_CVI_GetSystemTime
setlocale
_UP_GetTextBoxLineIndexFromOffset
GetNumListItems
CmtExitThreadPoolThread
RemovePanelFromSplitter
setvbuf
_UP_CVI_OpenFile
signal
GetNumMenuItems
CmtFlushTSQ
sin_FLTREG_
RemovePopup
_UP_GetTextBoxLineLength
_UP_CVI_ReadFile
GetNumTabPages
sinh_FLTREG_
CmtGetCurrentThreadID
snprintf
RenameFile
GetNumTableCellRingItems
_UP_CVI_SetFileTime
_UP_GetTextBoxLineOffset
sopen
ReplaceAxisItem
CmtGetCurrentThreadPriority
sprintf
_UP_CVI_SetSystemTime
sqrt_FLTREG_
ReplaceListItem
GetNumTableColumns
_UP_GetTextDisplaySize
srand
CmtGetErrorMessage
sscanf
ReplaceStatusBarCellListItem
_UP_CVI_WriteFile
GetNumTableRows
strcat
_UP_GetTimerTickData
CmtGetLock
strchr
GetNumTextBoxLines
_UP_CVI__putenv
ReplaceTextBoxLine
strcmp
CmtGetLockAttribute
_UP_GetTraceAttribute
strcoll
_UP_CVI_atoi64
GetNumTreeCellRingItems
ReportUPError
strcpy
CmtGetLockEx
_UP_GetTreeCellRingIndexFromValue
_UP_CVI_atoll
strcspn
ResetTextBox
GetNumTreeColumns
CmtGetMainThreadID
_UP_CVI_lldiv
strerror
ResetTimer
strftime
_UP_GetTreeCellRingValueLengthFromIndex
_UP_CVI_strtol64
GetNumTreeItems
CmtGetNumProcessors
ResumeTimerCallbacks
stricmp
_UP_CVI_strtoll
strlen
GetNumericColorRamp
CmtGetTSQAttribute
RetireExecutableHandle
strncat
_UP_CVI_strtoul64
_UP_GetTreeItem
strncmp
GetObjHandleFromActiveXCtrl
CmtGetTSQAttributeEx
strncpy
ReturnRS232Err
_UP_CVI_strtoull
_UP_GetTreeItemFromLabel
strnicmp
CmtGetTSQReadPtr
RoundRealToNearestInteger
_UP_CanvasDrawPoly
GetOutQLen
strpbrk
_UP_GetTreeItemFromTag
strrchr
GetOwnerOfMenuObject
CmtGetTSQWritePtr
_UP_CanvasDrawText
RunExternalModule
strspn
_UP_GetTreeItemLevel
GetPanelAttribute
strstr
CmtGetTSVPtr
_UP_CanvasDrawTextAtPoint
RunPopupMenu
strtod_FLTREG_
CmtGetThreadLocalVar
GetPanelDisplayBitmap
strtok
_UP_GetTreeItemNumChildren
RunUserInterface
strtol
_UP_CanvasGetClipRect
CmtGetThreadPoolAttribute
strtol64
GetPanelEventRect
SaveBitmapToBMPFile
_UP_GetTreeItemNumDescendents
strtoll
_UP_CanvasGetPenPosition
GetPanelHandleFromTabPage
strtoul
SaveBitmapToJPEGFile
CmtGetThreadPoolFunctionAttribute
strtoul64
_UP_GetTreeItemParent
_UP_CanvasGetPixel
strtoull
SaveBitmapToPNGFile
GetPanelMenuBar
CmtInstallTSQCallback
strxfrm
_UP_GetTreeItemPathLength
_UP_CanvasGetPixels
GetPersistentVariable
SaveBitmapToTIFFile
system
tan_FLTREG_
CmtInstallThreadPoolCallback
_UP_CheckForDuplicateAppInstance
_UP_GetUDPAttribute
tanh_FLTREG_
GetPlotAttribute
SavePanelState
time
tmpfile
_UP_GetUDPSocketHandle
ScaleTextPlots
GetPrintAttribute
CmtNewLock
_UP_ClientDDEExecute
tmpnam
Scan
CmtNewTSQ
tolower
GetProjectDir
_UP_GetUserEvent
ScanFile
toupper
_UP_ClientDDERead
CmtNewTSV
ScanIn
GetRS232ErrorString
ungetc
_UP_GetValueLengthFromIndex
CmtNewThreadLocalVar
ServerDDEWrite
_UP_ClientDDEWrite
vfprintf
GetRTFileAPIErrorString
vfscanf
ServerTCPRead
CmtNewThreadPool
_UP_ClientTCPRead
_UP_IncrementCVIAbsoluteTime
vprintf
GetRTModuleAddr
ServerTCPWrite
vscanf
CmtPreAllocThreadPoolThreads
_UP_ClientTCPWrite
vsnprintf
_UP_IncrementCVITimeInterval
GetRTSystemInfo
Set387CW
vsprintf
_UP_ClipboardGetBitmap
SetActiveCtrl
CmtReadTSQData
vsscanf
GetRTUtilErrorString
_UP_InsertAxisItem
wcslen
SetActiveGraphCursor
CmtReleaseLock
_UP_ClipboardGetTableVals
wcstombs
GetRealFontTypefaceName
_UP_InsertTabPage
wctomb
CmtReleaseTSQReadPtr
SetActivePanel
write
_UP_ClipboardPutText
GetRealFontTypefaceNameLength
_UP_InsertTableCellRangeRingItem
SetActiveStatusBar
CmtReleaseTSQWritePtr
_UP_CloseCom
SetActiveTabPage
GetRelativeMouseState
CmtReleaseTSVPtr
_UP_CloseWinsock
_UP_InsertTableCellRingItem
SetActiveTableCell
CmtReleaseThreadPoolFunctionID
GetRingItemAttribute
_UP_CmtDiscardLock
_UP_InsertTextBoxLine
SetActiveTreeItem
_UP_CmtDiscardTSQ
GetScaledCtrlDisplayBitmap
CmtScheduleThreadPoolFunction
SetAnnotationAttribute
_UP_InsertTreeCellRingItem
_UP_CmtDiscardTSV
GetScaledPanelDisplayBitmap
SetAxisRange
CmtScheduleThreadPoolFunctionAdv
_UP_CmtDiscardThreadLocalVar
_UP_InsertTreeColumn
SetAxisScalingMode
GetScalingFactorsForPrintJob
_UP_InstallComCallback
CmtSetCurrentThreadPriority
_UP_CmtDiscardThreadPool
SetAxisTimeFormat
GetScreenSize
_UP_InstallCtrlCallback
SetBitmapData
_UP_CmtExitThreadPoolThread
CmtSetTSQAttribute
GetSharedMenuBarEventPanel
SetBitmapDataEx
CmtSetTSV
_UP_InstallMainCallback
_UP_CmtFlushTSQ
GetSleepPolicy
CmtSetThreadPoolAttribute
SetBreakOnFirstChanceExceptions
_UP_InstallMenuCallback
_UP_CmtGetCurrentThreadPriority
GetStatusBarAndCellIndexFromCtrl
CmtTerminateThreadPoolThread
SetBreakOnLibraryErrors
_UP_InstallMenuDimmerCallback
_UP_CmtGetErrorMessage
GetStatusBarAttribute
CmtTryToGetLock
SetBreakOnProtectionErrors
_UP_InstallPanelCallback
_UP_CmtGetLock
GetStatusBarCellAttribute
CmtUninstallTSQCallback
SetCTSMode
_UP_CmtGetLockAttribute
_UP_IsListItemChecked
GetStatusBarCellBitmap
CmtUninstallThreadPoolCallback
SetCVILogOutputFormat
_UP_CmtGetLockEx
_UP_IsTreeItemExposed
GetStatusBarCellListIndex
SetCVILogReportingLevels
CmtWaitForThreadPoolFunctionCompletion
_UP_CmtGetTSQAttribute
_UP_LaunchExecutable
GetStatusBarCellNumListItems
SetCVILogReportingLocation
_UP_CmtGetTSQAttributeEx
_UP_LaunchExecutableEx
CmtWaitForThreadPoolFunctionCompletionEx
GetStatusBarCellVal
SetColumnWidthToWidestCellContents
_UP_CmtGetTSQReadPtr
_UP_LoadExternalModule
GetStdioPort
CmtWriteTSQData
GetStdioWindowOptions
_UP_CmtGetTSQWritePtr
SetComTime
_UP_LoadExternalModuleEx
ColorRGBSelectPopup
SetCtrlArrayAttribute
GetStdioWindowPosition
_UP_CmtGetTSVPtr
_UP_LoadMenuBar
ComBreak
SetCtrlArrayVal
_UP_CmtGetThreadLocalVar
GetStdioWindowSize
ComFromFile
_UP_LoadMenuBarEx
SetCtrlAttribute
ComRd
GetStdioWindowVisibility
_UP_CmtGetThreadPoolAttribute
_UP_LoadPanel
SetCtrlBitmap
ComRdByte
_UP_LoadPanelEx
ComRdTerm
SetCtrlIndex
GetSubMenuId
_UP_CmtGetThreadPoolFunctionAttribute
ComSetEscape
GetSwitchState
_UP_LoadRTModule
SetCtrlMenuAttribute
ComToFile
GetSystemAttribute
_UP_LockRTSystem
SetCtrlVal
_UP_CmtInstallTSQCallback
ComWrt
SetCursorAttribute
GetSystemComHandle
_UP_MakeDateTime
ComWrtByte
_UP_CmtInstallThreadPoolCallback
SetDir
CommitChangesToRTSystem
GetSystemDate
_UP_MakeDir
SetDrive
_UP_MakePathname
GetSystemPopupsAttribute
CompareBytes
SetEnableResourceTracking
_UP_CmtNewLock
_UP_MapPhysicalMemory
CompareCVIAbsoluteTimes
GetTCPErrorString
_UP_CmtNewTSQ
SetFileAttrs
_UP_MessagePopup
_UP_CmtNewTSV
GetTCPHostAddr
CompareCVIAbsoluteTimesWithTolerance
SetFileDate
_UP_CmtNewThreadLocalVar
_UP_MultiplyCVITimeInterval
GetTCPHostConnectionAddr
SetFilePtr
SetFontPopupDefaults
CompareCVITimeIntervals
_UP_CmtNewThreadPool
GetTCPHostName
_UP_NIWatchdog_Acknowledge
SetFontPopupDefaultsEx
CompareCVITimeIntervalsWithTolerance
GetTCPPeerAddr
_UP_CmtPreAllocThreadPoolThreads
_UP_NIWatchdog_AddResetAction
GetTCPPeerName
SetGraphCursor
CompareStrings
_UP_CmtReadTSQData
GetTCPSystemErrorString
_UP_NIWatchdog_AddTriggerAction
SetGraphCursorIndex
ConfigurePrinter
_UP_CmtReleaseLock
SetIdleEventRate
GetTabPageAttribute
_UP_NIWatchdog_Clear
ConfigureProcessorPool
_UP_CmtReleaseTSQReadPtr
SetImageBits
GetTabPageFromPoint
_UP_NIWatchdog_ClearOutputs
ConfirmPopup
SetInputMode
_UP_CmtReleaseTSQWritePtr
GetTableCellAttribute
ConnectToDDEServer
SetKeyPressEventKey
_UP_NIWatchdog_Close
_UP_CmtReleaseTSVPtr
GetTableCellFromPoint
ConnectToTCPServer
SetLedState
_UP_NIWatchdog_Configure
_UP_CmtReleaseThreadPoolFunctionID
SetListItemImage
GetTableCellFromValue
ConnectToTCPServerEx
_UP_NIWatchdog_Disable
SetMenuBarAttribute
GetTableCellRangeRect
ConvertUICoordinates
_UP_CmtScheduleThreadPoolFunction
_UP_NIWatchdog_Enable
SetMouseCursor
GetTableCellRangeVals
CopyBytes
SetNumericColorRamp
_UP_NIWatchdog_GetAttribute
CopyString
_UP_CmtScheduleThreadPoolFunctionAdv
GetTableCellRingIndexFromValue
CopyTabPage
SetOwnerForNextCreatedWindow
_UP_NIWatchdog_Open
CopyTreeItem
_UP_CmtSetCurrentThreadPriority
GetTableCellRingItemAttribute
SetPanelAttribute
CreateMetaFont
_UP_NIWatchdog_Reset
SetPanelCharacterSet
_UP_CmtSetTSQAttribute
CreateMetaFontEx
GetTableCellRingValueFromIndex
_UP_NIWatchdog_SetAttribute
SetPanelEventRect
CreateMetaFontWithCharacterSet
_UP_CmtSetTSV
_UP_NIWatchdog_Start
GetTableCellRingValueLengthFromIndex
_UP_CmtSetThreadPoolAttribute
SetPanelMenuBar
CreateRTSystemImage
_UP_NIWatchdog_Whack
SetPanelPos
_UP_CmtTerminateThreadPoolThread
GetTableCellVal
CreateUDPChannel
_UP_NewActiveXCtrl
SetPanelSize
GetTableCellValLength
CreateUDPChannelConfig
SetPersistentVariable
_UP_NewActiveXCtrlFromFile
_UP_CmtTryToGetLock
GetTableColumnAttribute
SetPlotAttribute
CurrThreadId
_UP_CmtUninstallTSQCallback
_UP_NewBitmap
DOSColorToRGB
SetPrintAttribute
GetTableColumnFromLabel
_UP_NewBitmapEx
_UP_CmtUninstallThreadPoolCallback
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptrdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nicvidbg Size: 512B - Virtual size: 281B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ