pluginMain
Static task
static1
Behavioral task
behavioral1
Sample
050c117df33904673902f5736439b7b0_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
050c117df33904673902f5736439b7b0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
050c117df33904673902f5736439b7b0_NeikiAnalytics
-
Size
59KB
-
MD5
050c117df33904673902f5736439b7b0
-
SHA1
6790652e8a20a43c4bd97a7880dd148c86d6c790
-
SHA256
893b4dc0927527c73f3e3524bb7bc8cb91ce00893bb211c3d01d0b84cca29634
-
SHA512
f0a92900aa7c0eeed168c8ce33e1a47a875399e94285704377a84af8f6f50c0e1bedbe41cb597197ad45f3a1fc6578f1b2c6506143d22cfa4ffb808b5a63df09
-
SSDEEP
768:lWUQH+favYCvx+KiRJj0XfysIMkX4F9fYO8EAJLp7004K9jCAe3AFnZI:lZc+CjpXJIx4F9hBANpR9jCAj2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050c117df33904673902f5736439b7b0_NeikiAnalytics
Files
-
050c117df33904673902f5736439b7b0_NeikiAnalytics.dll windows:5 windows x64 arch:x64
caa86c0f718801d75beea84b47e76744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
Sleep
LoadLibraryA
GetProcAddress
GetLastError
FormatMessageA
OutputDebugStringA
LocalFree
FreeLibrary
DisableThreadLibraryCalls
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
user32
MessageBoxA
advapi32
RegCloseKey
AllocateAndInitializeSid
SetEntriesInAclA
IsValidAcl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
libmmd
ceilf
powf
__isinff
log10f
msvcr100
memcpy
_onexit
_lock
__dllonexit
_unlock
memmove
__clean_type_info_names_internal
_putenv_s
sprintf
getenv
free
malloc
wcstombs
wcschr
mbstowcs
_vsnprintf
_ftime64
isspace
strstr
memset
_close
_read
_open
_malloc_crt
_initterm
_initterm_e
_encoded_null
_amsg_exit
__C_specific_handler
__CppXcptFilter
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ