Static task
static1
Behavioral task
behavioral1
Sample
32ae6b9a042138dfacd49449a105c8b799620c1e86385fe20845c27f0cce8d9b_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
32ae6b9a042138dfacd49449a105c8b799620c1e86385fe20845c27f0cce8d9b_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
32ae6b9a042138dfacd49449a105c8b799620c1e86385fe20845c27f0cce8d9b_NeikiAnalytics.exe
-
Size
57KB
-
MD5
fb53bc1f7b4577554e060243207a9f40
-
SHA1
139d29540f3a595841adba866966f2cc10530775
-
SHA256
32ae6b9a042138dfacd49449a105c8b799620c1e86385fe20845c27f0cce8d9b
-
SHA512
57a6370369d3fca839eff420e577e602427952254e0d8f6653a19cf104ed176b7a0d1ffb600f74fccb2bb3e9d22e40af07bd20fbbf953bf6715f1c388e23cb85
-
SSDEEP
768:fSWKGU1nomadH2bPgMLK1B6bcCD9FTooSBDeoGnPChclbN3u9A:2Lx4M07M9tZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32ae6b9a042138dfacd49449a105c8b799620c1e86385fe20845c27f0cce8d9b_NeikiAnalytics.exe
Files
-
32ae6b9a042138dfacd49449a105c8b799620c1e86385fe20845c27f0cce8d9b_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
89bddfc250b5d33660524f8fd0644781
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FreeResource
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadPriority
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
WaitForSingleObject
WideCharToMultiByte
WriteFile
oleaut32
SysAllocStringLen
SysFreeString
SysReAllocStringLen
user32
CharLowerBuffW
CharUpperBuffW
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 512B - Virtual size: 444B
IMAGE_SCN_MEM_DISCARDABLE
.stabstr Size: 512B - Virtual size: 373B
IMAGE_SCN_MEM_DISCARDABLE