Static task
static1
Behavioral task
behavioral1
Sample
19552aaf508beb9113103d838e782483c05c90c41149a8c91266c138ebd2439b_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19552aaf508beb9113103d838e782483c05c90c41149a8c91266c138ebd2439b_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
19552aaf508beb9113103d838e782483c05c90c41149a8c91266c138ebd2439b_NeikiAnalytics.exe
-
Size
284KB
-
MD5
9be7f585ee6394eea849d3f9bb518400
-
SHA1
41f32c15d25f46a86201066b9a04b186ad189153
-
SHA256
19552aaf508beb9113103d838e782483c05c90c41149a8c91266c138ebd2439b
-
SHA512
bc0f01f1f48cdaad0722e06240c4a9b6522d91cb22cd9d29ac90096a79a9e7b13f2731f3b1efacdd3e6225dcbe481162edd63c20e4982495c41678cb7e9f7bc8
-
SSDEEP
6144:GG/JGjQnQTNgl979k4zyPr5tRdzB6hW+SVXRdF+VTqnaPhsesQck:R/AQnQwPE5tRd0h9IIhsOck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19552aaf508beb9113103d838e782483c05c90c41149a8c91266c138ebd2439b_NeikiAnalytics.exe
Files
-
19552aaf508beb9113103d838e782483c05c90c41149a8c91266c138ebd2439b_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
4d2efee6f5edd66280cb0c8846157bf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
GetCurrentThread
GetACP
InterlockedExchange
DeleteAtom
GetThreadPriority
GetExpandedNameA
HeapCreate
VirtualProtect
WriteConsoleA
GetModuleHandleA
FlushFileBuffers
GetCurrentProcess
GetTimeFormatA
GetStdHandle
GetEnvironmentStringsA
FormatMessageA
LoadLibraryA
IsDebuggerPresent
GetCurrentProcessId
HeapDestroy
user32
EndPaint
ShowWindow
wsprintfA
GetCursorPos
FillRect
DragDetect
GetDlgItem
GetWindowTextLengthA
GetParent
GetWindow
GetClassNameA
BeginPaint
DrawTextA
SetActiveWindow
GetFocus
ReleaseDC
FrameRect
GetTitleBarInfo
SetForegroundWindow
advapi32
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyA
RegFlushKey
RegEnumKeyA
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ