Static task
static1
Behavioral task
behavioral1
Sample
b335f3255c8007f33a519e343d110bccfa2e3fd29c320c9cdcc9d6a5961434e7_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b335f3255c8007f33a519e343d110bccfa2e3fd29c320c9cdcc9d6a5961434e7_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
b335f3255c8007f33a519e343d110bccfa2e3fd29c320c9cdcc9d6a5961434e7_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
ee4b97ede63dcc0f4306efc5f61fcdd0
-
SHA1
50670b01d7c7d5eafc7a23b8d3d71cf08ced954f
-
SHA256
b335f3255c8007f33a519e343d110bccfa2e3fd29c320c9cdcc9d6a5961434e7
-
SHA512
640898849d152ac27bca41e24d0cacf6e3a112be16b447dbc4692f2f82999f7501a5bed80a1c942e748bf66b065977d0f1245c88b897f85078dfb9cfdb0bf4fc
-
SSDEEP
12288:hVKCrQgPgm3NYBTrqc4SyayPBqIMUAaBGfFa133ngf8h3+jAPXio7:h8CrBPgW9c45pqSAasdW3Xfl4ho
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b335f3255c8007f33a519e343d110bccfa2e3fd29c320c9cdcc9d6a5961434e7_NeikiAnalytics.exe
Files
-
b335f3255c8007f33a519e343d110bccfa2e3fd29c320c9cdcc9d6a5961434e7_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
1e31694bec15df0893e3adabba7338a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
Sleep
lstrcatA
GetSystemDirectoryA
lstrcmpA
lstrcpynA
FindClose
FindNextFileA
lstrlenA
FindFirstFileA
GetWindowsDirectoryA
GetDriveTypeA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SizeofResource
LockResource
LoadResource
FindResourceA
EnumResourceNamesA
LoadLibraryExA
FreeLibrary
WaitForSingleObject
CreateProcessA
GetLastError
CreateEventA
GetStringTypeW
GetStringTypeA
SetEndOfFile
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
ExitProcess
TerminateProcess
GetCurrentProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
CloseHandle
ReadFile
SetFilePointer
GetFullPathNameA
WriteFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
DeleteFileA
user32
CharUpperA
wsprintfA
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ