Static task
static1
Behavioral task
behavioral1
Sample
1dc935e2962273f7adcaddbedc4cc280_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1dc935e2962273f7adcaddbedc4cc280_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
1dc935e2962273f7adcaddbedc4cc280_NeikiAnalytics
-
Size
5.4MB
-
MD5
1dc935e2962273f7adcaddbedc4cc280
-
SHA1
57ef4297fd3841281210d4c703e225d67f8629fb
-
SHA256
b53034fbd5046de4cf7450c433e549761dc4553b602205e72a9ca8dc4d49d59e
-
SHA512
6e139da03d922d67bcca4da71dafe571625945fec568854fd1cd945cec91bbc19f8c474468f3b5c9c05cabbe57e86c19694a321c644320887c2328d092a64aea
-
SSDEEP
98304:JZ8i0E6xfJQTEf71yas6Nt9MRsbzzYGBdHSVmSelE7PbMB0C9Tfq5zejCjck4pMA:gZxUEfcasO9LbnYGBdHnluPbMBHtEvcx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dc935e2962273f7adcaddbedc4cc280_NeikiAnalytics
Files
-
1dc935e2962273f7adcaddbedc4cc280_NeikiAnalytics.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 11.1MB - Virtual size: 11.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12.0MB - Virtual size: 12.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ