Static task
static1
Behavioral task
behavioral1
Sample
2faaaf6f3a4b168b9fa0755250a9a1ee8d6f50977436b0eb450400b90313007e_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2faaaf6f3a4b168b9fa0755250a9a1ee8d6f50977436b0eb450400b90313007e_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
2faaaf6f3a4b168b9fa0755250a9a1ee8d6f50977436b0eb450400b90313007e_NeikiAnalytics.exe
-
Size
180KB
-
MD5
cfe1d6b8326108cd18df63f2969f2ca0
-
SHA1
1f448d72c17e3a55711d9f51276c5f1c654f8fa6
-
SHA256
2faaaf6f3a4b168b9fa0755250a9a1ee8d6f50977436b0eb450400b90313007e
-
SHA512
c48d1eb8343e0313e6e02ef1d9639e3af0ddc3b7bb68d9b26c0f77d7c32cb334d1aa53ee24bedf099c893d2d3ba9a731a409a5994f29d07963d00710d6a0f4ff
-
SSDEEP
3072:BunUOizMvSJv5vhVPtpjx9yqhwq/YtQoUFI:c8MY5Vpt9Sqw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2faaaf6f3a4b168b9fa0755250a9a1ee8d6f50977436b0eb450400b90313007e_NeikiAnalytics.exe
Files
-
2faaaf6f3a4b168b9fa0755250a9a1ee8d6f50977436b0eb450400b90313007e_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
a112f9aa165d65aa584f45f387b6ed62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
TerminateProcess
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
SetFilePointer
CloseHandle
SetStdHandle
GetTimeZoneInformation
CompareStringA
CompareStringW
LocalFree
FormatMessageA
FreeLibrary
SetErrorMode
ExitProcess
GetModuleFileNameA
HeapAlloc
SetEnvironmentVariableA
DeleteFileA
MoveFileA
GetSystemTimeAsFileTime
GetSystemTime
GetLocalTime
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
SetFileAttributesA
GetFileAttributesA
SetCurrentDirectoryA
ReadFile
RaiseException
SetEnvironmentVariableW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateFileA
SetEndOfFile
advapi32
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ