Static task
static1
Behavioral task
behavioral1
Sample
b20b0dacf6cee7349769477e1c1095a1660b3c18bf9df23ae577dfc86e8dd66e_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b20b0dacf6cee7349769477e1c1095a1660b3c18bf9df23ae577dfc86e8dd66e_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
b20b0dacf6cee7349769477e1c1095a1660b3c18bf9df23ae577dfc86e8dd66e_NeikiAnalytics.exe
-
Size
8.4MB
-
MD5
8244dbd90cc9b0f22e5041b003cc24a0
-
SHA1
62e864dbba49382c1c82eb5692696c2b41823bdc
-
SHA256
b20b0dacf6cee7349769477e1c1095a1660b3c18bf9df23ae577dfc86e8dd66e
-
SHA512
202cf71a4f597a1724cfb526c9269efe07e02e260f362a15a3d77c4cef465c2f0a660a9194b299b9140e26244a7d709929cbc264faa6fc2024ee45ce1efc246a
-
SSDEEP
196608:udxm/Q8gnfYTW3bY0zYXhqtfSyK0rIC1s3Ne2PuOIs4Y8G:ud0/Q8gnfYTWrYXYK0/zObIV8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b20b0dacf6cee7349769477e1c1095a1660b3c18bf9df23ae577dfc86e8dd66e_NeikiAnalytics.exe
Files
-
b20b0dacf6cee7349769477e1c1095a1660b3c18bf9df23ae577dfc86e8dd66e_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
e2a1b0ae61bf07fd2b608a4ce673f9e2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
gdi32
DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
SetStretchBltMode
StretchBlt
DeleteDC
CreateDIBSection
StretchDIBits
GetObjectA
GetStockObject
CreateDCA
CreateCompatibleBitmap
SetTextAlign
SelectPalette
RealizePalette
CreateBrushIndirect
CreateSolidBrush
SetBkMode
GetDeviceCaps
StartDocA
StartPage
SetMapMode
SetWindowExtEx
SetViewportExtEx
CreateRectRgn
SelectClipRgn
EndPage
EndDoc
CreateICA
GetEnhMetaFileA
DeleteEnhMetaFile
CreateFontA
GetTextMetricsA
GetTextExtentPoint32A
CreatePalette
GetEnhMetaFileHeader
EnumEnhMetaFile
GetMetaFileA
DeleteMetaFile
CombineRgn
SetTextColor
CreatePen
RoundRect
Ellipse
Polygon
CreateBitmap
CreatePatternBrush
MoveToEx
LineTo
TextOutA
GetClipRgn
Rectangle
GetTextExtentPointA
GetPixel
SetPixelV
SetViewportOrgEx
SetDIBitsToDevice
GetDIBits
GetSystemPaletteEntries
EnumFontsA
CreateMetaFileA
CreateEnhMetaFileA
CloseMetaFile
CloseEnhMetaFile
kernel32
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalSize
OutputDebugStringA
LoadLibraryA
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateFileA
WriteFile
CloseHandle
GetTempPathA
GetTempFileNameA
SetFilePointer
GetFileSize
SetEndOfFile
ReadFile
FlushFileBuffers
_llseek
_lread
ExitProcess
GetTickCount
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
SystemTimeToFileTime
CompareFileTime
GetModuleFileNameA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetLocaleInfoA
GetSystemTime
GetVersion
lstrcpynA
_hread
_hwrite
_lopen
_lclose
_lcreat
SetCommTimeouts
GetCommState
SetCommState
FreeLibrary
lstrcpyA
GetCommandLineA
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CreateThread
CompareStringA
IsDBCSLeadByte
GetStringTypeExA
CompareStringW
FatalAppExitA
GetLocalTime
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCurrentThreadId
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GlobalReAlloc
IsBadReadPtr
GetCurrentDirectoryA
DeleteFileA
GetLogicalDrives
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleHandleA
GetLastError
CreateMutexA
FindFirstFileA
ReleaseMutex
FindClose
IsValidCodePage
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
FindNextFileA
GetLogicalDriveStringsA
GetFileAttributesA
SetFileAttributesA
LocalFileTimeToFileTime
SetFileTime
RemoveDirectoryA
CopyFileA
MoveFileA
CreateDirectoryA
GetStartupInfoA
GetCurrentProcess
DuplicateHandle
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
shell32
DragQueryFileA
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
SHGetSpecialFolderLocation
user32
GetAsyncKeyState
WindowFromDC
GetSysColor
GetDC
ReleaseDC
SetRect
FillRect
DrawFocusRect
InvalidateRect
SetFocus
LoadCursorA
LoadImageA
CreateCursor
SetCursor
wsprintfA
AdjustWindowRect
CreateWindowExA
SetWindowLongA
SetMenu
GetClientRect
GetWindowRect
ClientToScreen
ScreenToClient
MoveWindow
IsWindowVisible
ShowWindow
GetActiveWindow
SendMessageA
GetWindowLongA
BringWindowToTop
GetSystemMetrics
BeginPaint
EndPaint
SetWindowTextA
EnumWindows
EnumChildWindows
DefWindowProcA
GetMessageTime
GetMessagePos
SystemParametersInfoA
GetClassNameA
GetCursorPos
LoadIconA
RegisterClassA
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
RegisterClipboardFormatA
TrackPopupMenu
GetMenuStringA
SetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
EnableWindow
GetPropA
CallWindowProcA
UpdateWindow
FrameRect
ValidateRect
MessageBoxA
DestroyWindow
GetParent
GetKeyState
GetScrollRange
GetScrollPos
SetScrollPos
SetScrollRange
SetScrollInfo
GetScrollInfo
KillTimer
SetTimer
TranslateMDISysAccel
CreateMDIWindowA
FindWindowW
FindWindowA
MessageBeep
DefFrameProcA
DefMDIChildProcA
SetWindowPos
GetForegroundWindow
GetMenuState
GetMenu
CharUpperBuffA
CharLowerBuffA
CreatePopupMenu
DestroyMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
DeleteMenu
SetMenuItemInfoA
GetMenuItemInfoA
EnableMenuItem
CheckMenuItem
CreateMenu
GetDoubleClickTime
WindowFromPoint
PeekMessageA
TranslateMessage
DispatchMessageA
GetMessageA
SetCapture
ReleaseCapture
DrawTextA
GetSysColorBrush
DrawIcon
OffsetRect
ScrollWindow
DragDetect
SetParent
RedrawWindow
IsRectEmpty
winmm
mciSendStringA
waveOutSetVolume
waveOutGetVolume
mciGetDeviceIDA
midiOutSetVolume
midiOutOpen
midiOutClose
midiOutShortMsg
comdlg32
PrintDlgA
PageSetupDlgA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
ole32
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleUninitialize
OleInitialize
Sections
.text Size: 745KB - Virtual size: 745KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ