Static task
static1
Behavioral task
behavioral1
Sample
96e273eac2b721e16c5b30a06b2da5ad8b656b041584024f07650ab0b04a7c20_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
96e273eac2b721e16c5b30a06b2da5ad8b656b041584024f07650ab0b04a7c20_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
96e273eac2b721e16c5b30a06b2da5ad8b656b041584024f07650ab0b04a7c20_NeikiAnalytics.exe
-
Size
949KB
-
MD5
17fec2d8e943ef3e2467c50a3b727b00
-
SHA1
9a7fb22700c21ef5049071a4db5d81f6a5f9766c
-
SHA256
96e273eac2b721e16c5b30a06b2da5ad8b656b041584024f07650ab0b04a7c20
-
SHA512
5c4f6f951f462a0a0b340c4e8e6f9eabe59a1430b4217116f13be08f08bac8183d339aa97bcc7bac2b38ca2d7f2c1ef56a2eff0693b9b9d57d703fdffe8eed44
-
SSDEEP
6144:6fvnpVzU10dA8ShBDzi+UjA6isMI9WkCB7:YnnzU10KHDzi9i5Iry7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96e273eac2b721e16c5b30a06b2da5ad8b656b041584024f07650ab0b04a7c20_NeikiAnalytics.exe
Files
-
96e273eac2b721e16c5b30a06b2da5ad8b656b041584024f07650ab0b04a7c20_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
aff8a2edb75627af68d443f4b8dcfec9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapCreate
VirtualFree
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
SetHandleCount
GetEnvironmentStringsW
IsBadCodePtr
GetLocaleInfoA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapDestroy
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
MulDiv
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GetDriveTypeA
GetWindowsDirectoryA
DeleteFileA
Sleep
GetVersionExA
GetCurrentThread
GetLastError
GetCurrentProcess
lstrcpynA
GetProfileStringA
GetACP
GetTimeZoneInformation
GetOEMCP
HeapSize
GetCPInfo
HeapReAlloc
RaiseException
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
HeapAlloc
TerminateProcess
ExitProcess
HeapFree
RtlUnwind
FileTimeToSystemTime
GetTickCount
FileTimeToLocalFileTime
SetErrorMode
GetFileAttributesA
GetFileTime
GetFileSize
WritePrivateProfileStringA
GlobalAddAtomA
GetModuleFileNameA
GetThreadLocale
FindFirstFileA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
FindClose
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
lstrcpyA
CreateFileA
DuplicateHandle
LoadLibraryA
SizeofResource
GetProcessVersion
GlobalFlags
GetProcAddress
FreeLibrary
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
SetLastError
GetLocaleInfoW
lstrlenA
CloseHandle
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
user32
ReleaseDC
PostThreadMessageA
ValidateRect
GetCursorPos
PostQuitMessage
ShowOwnedPopups
GrayStringA
DrawTextA
TabbedTextOutA
BeginPaint
RegisterClipboardFormatA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
GetWindowDC
IsDialogMessageA
GetActiveWindow
CreateDialogIndirectParamA
PostMessageA
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
BringWindowToTop
ScrollWindow
IntersectRect
InflateRect
ShowScrollBar
SetMenu
CopyAcceleratorTableA
GetScrollPos
SetScrollPos
GetTopWindow
IsWindowEnabled
IsChild
GetCapture
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetNextDlgGroupItem
SetRect
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
InvalidateRect
LoadCursorA
SetCursor
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadImageA
GetSystemMenu
AppendMenuA
UnpackDDElParam
ReuseDDElParam
SetScrollInfo
IsWindowVisible
ScreenToClient
CharNextA
LoadIconA
MessageBoxA
WinHelpA
GetWindowRect
GetDC
wsprintfA
GetParent
MessageBeep
SendMessageA
EnableWindow
WindowFromPoint
ReleaseCapture
CharUpperA
OffsetRect
FindWindowA
GetSysColorBrush
GetDesktopWindow
ClientToScreen
PtInRect
GetClassNameA
DestroyMenu
MapDialogRect
LoadStringA
GetMessageA
TranslateMessage
SetScrollRange
EndDialog
GetNextDlgTabItem
EndPaint
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
UnregisterClassA
gdi32
CreateHalftonePalette
RealizePalette
GetDeviceCaps
BitBlt
SetTextColor
SetBkColor
CreateSolidBrush
DeleteDC
CreateBitmap
RestoreDC
SelectObject
SaveDC
SelectPalette
SetBkMode
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
GetDIBColorTable
CreatePalette
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
IntersectClipRect
DeleteObject
GetViewportExtEx
GetWindowExtEx
RectVisible
TextOutA
PtVisible
Escape
LPtoDP
ExtTextOutA
GetTextExtentPointA
DPtoLP
GetTextColor
GetBkColor
GetMapMode
PatBlt
CreateDIBitmap
GetTextExtentPoint32A
CreateCompatibleDC
GetObjectA
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
shell32
DragFinish
ShellExecuteA
DragQueryFileA
comctl32
ord17
ImageList_Destroy
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoGetClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemAlloc
oleaut32
OleCreateFontIndirect
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
Sections
.text Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 707KB - Virtual size: 707KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ