Static task
static1
Behavioral task
behavioral1
Sample
da3a16bf7db3a4d56314e995b6309740_NeikiAnalytics.dll
Resource
win7-20240220-en
General
-
Target
da3a16bf7db3a4d56314e995b6309740_NeikiAnalytics
-
Size
120KB
-
MD5
da3a16bf7db3a4d56314e995b6309740
-
SHA1
735417f8bfa2bdf7e423f0a9d0a09bb8d42a47c8
-
SHA256
3875437a16203a04cbf2c58f91c3976ea35d8b783d0bfbf85d53b0971d14a1e3
-
SHA512
ad7972e17e3d27bd043b15dd764e471eb56973bf9a8decae9af0303d0141b77bc3c3f6cf1da703ed43a5e21af7849ca10d8b5cc622e10366e9984558d24de8f5
-
SSDEEP
3072:mkuRckpQq79BE84FSgA9oK5wRwSxFxNIo:2cDq79BJ4Fc9LqRd9Io
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da3a16bf7db3a4d56314e995b6309740_NeikiAnalytics
Files
-
da3a16bf7db3a4d56314e995b6309740_NeikiAnalytics.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ