Behavioral task
behavioral1
Sample
00828b6b9e64dcd3f1e74747730bbf71b81ebcab2872d0e19199bb0b8e878448_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00828b6b9e64dcd3f1e74747730bbf71b81ebcab2872d0e19199bb0b8e878448_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
00828b6b9e64dcd3f1e74747730bbf71b81ebcab2872d0e19199bb0b8e878448_NeikiAnalytics.exe
-
Size
2.0MB
-
MD5
8f29b1a96f52d5cdccad37f2c2d32b30
-
SHA1
16742904656106fa94f84b04cf696f4171c95995
-
SHA256
00828b6b9e64dcd3f1e74747730bbf71b81ebcab2872d0e19199bb0b8e878448
-
SHA512
db1f0b9414823a2cd5c51873b4ae1cda37069fed58a6c6edf749c63b1e72f50da75ff856ae10ae212a7c7368d9c2f78906a28bb2a8c756674c067f1e9da2f841
-
SSDEEP
49152:jat+bWHjf+uxIDJkyUujoWKa/mS5K23+gFGocBxgzOmRY:OiWHxxGGujo9q553+oGosaOmRY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00828b6b9e64dcd3f1e74747730bbf71b81ebcab2872d0e19199bb0b8e878448_NeikiAnalytics.exe
Files
-
00828b6b9e64dcd3f1e74747730bbf71b81ebcab2872d0e19199bb0b8e878448_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
5db72bb83a3a5d4adb63bb621c80e959
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
htonl
rasapi32
RasGetConnectStatusA
kernel32
ReadFile
user32
SetMenu
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
StgCreateDocfileOnILockBytes
oleaut32
VariantInit
comctl32
ImageList_GetImageCount
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 792KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ