Static task
static1
Behavioral task
behavioral1
Sample
9b640092322be3ad329860fa26cf927db5d41c62e9e3dca9d1f9963b6e8019dc_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9b640092322be3ad329860fa26cf927db5d41c62e9e3dca9d1f9963b6e8019dc_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
9b640092322be3ad329860fa26cf927db5d41c62e9e3dca9d1f9963b6e8019dc_NeikiAnalytics.exe
-
Size
28KB
-
MD5
99b46bdf914544a458d0e957f3467b30
-
SHA1
b615bba4f3e7ccf150424606dbc07585afd2354f
-
SHA256
9b640092322be3ad329860fa26cf927db5d41c62e9e3dca9d1f9963b6e8019dc
-
SHA512
329229d54ad48b5b886882e839af3d23b27e77b0b7955c2ffa6c5efffcb1a756102560f503cc84ade2f87080eb93d20c5604dc987509841c026bc5bb0551ef3f
-
SSDEEP
384:rHh50gmTTKeyMCQhgbImrgaMXAuRmH0gBKkOTiGEU7kdsbWSGrRcQ4bWbnR:rHhTnQh4drgXy71OTi+WSGLtR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b640092322be3ad329860fa26cf927db5d41c62e9e3dca9d1f9963b6e8019dc_NeikiAnalytics.exe
Files
-
9b640092322be3ad329860fa26cf927db5d41c62e9e3dca9d1f9963b6e8019dc_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
677e4cf676403d2b76c5adbd88df5afd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
kernel32
GetModuleFileNameW
WriteFile
WriteConsoleW
WideCharToMultiByte
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointerEx
QueryPerformanceCounter
RtlUnwind
CloseHandle
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
OutputDebugStringW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
user32
LoadMenuW
ole32
CoInitializeEx
CoCreateInstance
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ