Static task
static1
Behavioral task
behavioral1
Sample
74214d26b59a91098fcd8c921e1729c0f18c1c321bb707b5a828c0ccc5327dfa_NeikiAnalytics.dll
Resource
win7-20240611-en
General
-
Target
74214d26b59a91098fcd8c921e1729c0f18c1c321bb707b5a828c0ccc5327dfa_NeikiAnalytics.exe
-
Size
6.5MB
-
MD5
c66120fde94a3edd7fe74148fbe64170
-
SHA1
ec8bd98d82e8d2a2caf9114b986dbc02d3aaa506
-
SHA256
74214d26b59a91098fcd8c921e1729c0f18c1c321bb707b5a828c0ccc5327dfa
-
SHA512
bfaae4465a6cf6132f00f808e0a2c6b96db660b959340a8582c8acb6d06f6d814da65f84775174aa7c606a6294e372e5ae015fa8946c8ac297a47e40d1bc7439
-
SSDEEP
98304:rMYIFoObFRWF1s8am0qyZWXAFw9EDf8Rm6Tw8/eoDCu4uuVzh6LIGzPF1:rq1F4VUvVf8zveoDduHkI01
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74214d26b59a91098fcd8c921e1729c0f18c1c321bb707b5a828c0ccc5327dfa_NeikiAnalytics.exe
Files
-
74214d26b59a91098fcd8c921e1729c0f18c1c321bb707b5a828c0ccc5327dfa_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
a3f6b86fd534f75493d58e1e2d629c14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
WriteFile
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
GetModuleFileNameW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
DeleteFileA
TlsFree
CloseHandle
LoadLibraryA
IsDBCSLeadByteEx
GetSystemDirectoryA
GetSystemTimeAdjustment
IsValidLocale
OpenProcess
SetCommTimeouts
GetCommState
ConnectNamedPipe
WaitForSingleObject
MapViewOfFile
TlsGetValue
GetCurrentProcessId
CreatePipe
MulDiv
GetWindowsDirectoryA
GetCurrentThread
SetEnvironmentVariableW
HeapSize
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
HeapFree
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsSetValue
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
user32
ClientToScreen
DestroyWindow
SetCursor
GetMessageA
SetTimer
SetCapture
IsZoomed
DeleteMenu
CreateMenu
BeginPaint
CreateIconIndirect
GetQueueStatus
UnregisterClassA
GetDlgItem
DefWindowProcA
FlashWindow
CheckRadioButton
InsertMenuA
DestroyMenu
SetDlgItemTextA
CheckMenuItem
GetMessageTime
IsRectEmpty
PostQuitMessage
DrawIconEx
RemovePropA
SetFocus
SetScrollRange
WaitMessage
GetDC
CreateDialogIndirectParamA
GetWindowTextA
SetScrollPos
GetDesktopWindow
SetCaretPos
TranslateMDISysAccel
CopyRect
gdi32
ExtCreatePen
SetLayout
TranslateCharsetInfo
Polygon
CreateFontA
GetDeviceCaps
CreateHalftonePalette
GetEnhMetaFileHeader
CreateBitmap
PtInRegion
GetSystemPaletteEntries
Polyline
RectVisible
RoundRect
IntersectClipRect
GetPixel
GetStockObject
GetTextExtentPoint32A
SetViewportOrgEx
LineTo
ExtFloodFill
GetCharacterPlacementW
SetPixel
GetRegionData
PlayEnhMetaFile
Rectangle
CreateBrushIndirect
OffsetRgn
GetCharABCWidthsFloatA
SetViewportExtEx
ExcludeClipRect
advapi32
RegCloseKey
InitializeSecurityDescriptor
OpenProcessToken
Sections
.text Size: 575KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ