Static task
static1
Behavioral task
behavioral1
Sample
6ab2a1ab0d0951b535327b33a2a2fc50_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6ab2a1ab0d0951b535327b33a2a2fc50_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
6ab2a1ab0d0951b535327b33a2a2fc50_NeikiAnalytics
-
Size
68KB
-
MD5
6ab2a1ab0d0951b535327b33a2a2fc50
-
SHA1
34826e3e68d63c26e70d57a8afad992a6c3c04cd
-
SHA256
9e4df6e424ace3826d8031cea3418623ec407fd2635ab9d7f26b7863d463dd61
-
SHA512
ce9fd1befb727141743aef05cce6ff84e587cc8d55847550daf3d468eb32523ef9bed4a2cdae7947c42d818c568acfa35e0c5b5f9bc238d003c4ab089bd862a6
-
SSDEEP
1536:AKG1vsPHbtLUbLTA1S2cWW58786NHEpc6kqzn/AJ:AKG1sHbUTA812HEaqzn/AJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ab2a1ab0d0951b535327b33a2a2fc50_NeikiAnalytics
Files
-
6ab2a1ab0d0951b535327b33a2a2fc50_NeikiAnalytics.dll windows:4 windows x86 arch:x86
d76425e973e5a8c6b06ecc5d2e85c138
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleFileNameA
CreateFileA
GetLastError
FormatMessageA
LocalFree
GetFileSize
CloseHandle
GetProcessHeap
HeapAlloc
HeapFree
TerminateProcess
GetFileTime
GetSystemTimeAsFileTime
MoveFileA
SetFileAttributesA
GetShortPathNameA
CompareStringA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetLastError
FreeLibrary
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
lstrlenA
DisableThreadLibraryCalls
GlobalFree
GetCommandLineA
VirtualProtect
GetTempPathA
GlobalAlloc
user32
MessageBoxA
LoadStringA
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
gdi32
GetObjectA
GetDeviceCaps
GetObjectType
GetCurrentObject
rpcrt4
NdrDllRegisterProxy
msvcr71
_vsnprintf
__dllonexit
__CppXcptFilter
_adjust_fdiv
_except_handler3
free
_XcptFilter
_onexit
_initterm
malloc
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ