afmotcmp_ex
Static task
static1
Behavioral task
behavioral1
Sample
e4d2a773dfbe336d1b4af716ceb4cd40_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e4d2a773dfbe336d1b4af716ceb4cd40_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
e4d2a773dfbe336d1b4af716ceb4cd40_NeikiAnalytics
-
Size
148KB
-
MD5
e4d2a773dfbe336d1b4af716ceb4cd40
-
SHA1
7a7116c56ca89d445522b9c7070db1005d326e8d
-
SHA256
442b2d5b678adf8c24f40d49b5d90258c2193caa5cedc854b4f3812d2035de08
-
SHA512
f6af33496d7fdbb3184dac9f2fedd31a46cf01083e4e39f37a162b5f7a077c0136b217beea8aba67533ba196aca52efd79c06a6cffce7d7c6f67ed75083c8adc
-
SSDEEP
3072:q2PZ9+cYYefornDRunRtezjaISUqfKm8ydCE8bRknIQwwj3f8TX34kNOHbvhkzmu:q2PZ9+cYYefornDRunRtezjaISUqCm8p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4d2a773dfbe336d1b4af716ceb4cd40_NeikiAnalytics
Files
-
e4d2a773dfbe336d1b4af716ceb4cd40_NeikiAnalytics.dll windows:4 windows x86 arch:x86
cdd58dcbbca76b753fa7444d3d66e1b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetLastError
WriteFile
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetFilePointer
CloseHandle
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
InitializeCriticalSection
RtlUnwind
HeapSize
InterlockedExchange
VirtualQuery
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetLocaleInfoA
GetACP
GetOEMCP
CreateFileA
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
SetEndOfFile
Exports
Exports
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ