Static task
static1
Behavioral task
behavioral1
Sample
5846bffb22d20a763261b56bac6d8e50_NeikiAnalytics.dll
Resource
win7-20240508-en
General
-
Target
5846bffb22d20a763261b56bac6d8e50_NeikiAnalytics
-
Size
120KB
-
MD5
5846bffb22d20a763261b56bac6d8e50
-
SHA1
ee9f2da8f0c77324015c1424e17985e25db3108f
-
SHA256
b72fc685bf2acec8fc372afc0b6b9a43443a7cd69157f4dde2b9c587f9b1efc9
-
SHA512
e7874e7e11207f1772dc1634ebf95bbea240b572b83abbebd09e2074e8de06ffb1005114157ad75545a54dba1b4d16e52a0bab0236b7f2bf707b7304b951f203
-
SSDEEP
1536:B8/A6qM2tblvpxE1qwi4AOhGVf58wQ/apbcp1J9isT2jwTkPom62fScxBEpGq/4+:GA6q1Z1QCOhG2/aqBiM4J626YNQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5846bffb22d20a763261b56bac6d8e50_NeikiAnalytics
Files
-
5846bffb22d20a763261b56bac6d8e50_NeikiAnalytics.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ