Static task
static1
Behavioral task
behavioral1
Sample
11a938e469e159666bbbff4e6542c9b0_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
11a938e469e159666bbbff4e6542c9b0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
11a938e469e159666bbbff4e6542c9b0_NeikiAnalytics
-
Size
1.7MB
-
MD5
11a938e469e159666bbbff4e6542c9b0
-
SHA1
564440cca84e10d32aa5b86497181085e1eeff40
-
SHA256
ae6597f33d1f19b36f6afbd67ab94a60aa5d851f4e32b379a6b670174acee3e3
-
SHA512
71f5cc84594424cac5793031ed43a79c90d49de11e28cc11c982f4aa1701f207595778484b0d9d4399dd980b4105500afe06c9dfd2b46752cdd9b062090e85b9
-
SSDEEP
49152:CqVf5fqQBABRksZJFo7NO7CsYLQoqq7e1q8:CqfiQWkgTqNOWLQoqLq8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11a938e469e159666bbbff4e6542c9b0_NeikiAnalytics
Files
-
11a938e469e159666bbbff4e6542c9b0_NeikiAnalytics.dll windows:5 windows x86 arch:x86
07905485a3685055ba6322909068c056
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetUserDefaultLangID
LoadLibraryExA
SetConsoleActiveScreenBuffer
SetStdHandle
GetModuleHandleW
GetModuleFileNameA
GetBinaryTypeA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
SetFocus
SetWindowContextHelpId
GetClipboardData
CheckMenuItem
SetCaretPos
GetTopWindow
SetCaretBlinkTime
WindowFromPoint
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 138KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CRT Size: 484KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nf Size: 868KB - Virtual size: 865KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kCijiDMd Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ