WEP
Static task
static1
Behavioral task
behavioral1
Sample
4b8b29cfbce4345370cfb9cc2b6bbb30_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4b8b29cfbce4345370cfb9cc2b6bbb30_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
4b8b29cfbce4345370cfb9cc2b6bbb30_NeikiAnalytics
-
Size
89KB
-
MD5
4b8b29cfbce4345370cfb9cc2b6bbb30
-
SHA1
1c32c0abac7464fe2c451dacbfbd33d578fb00e3
-
SHA256
6f6950cfb1a243c98b9ff334d620be97f701cd44572fda74df0f36cc2b1eeb29
-
SHA512
ca6530df1df4f57576eb1f81cc763388aa8eb10732bd9b9a9e02998b615565e8edab04f3441fa69e7db56bccb50aff369273e62c4d7ad0afa6fdb869bd9a9a73
-
SSDEEP
768:7s/xusk9YCw8Ge/C4GzcaSA3w4rFbWU/TAugFHKmmnpfxJZoUSjah7WrHEyjYCs:7WxwukugUFT8F8nBSja52jYv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b8b29cfbce4345370cfb9cc2b6bbb30_NeikiAnalytics
Files
-
4b8b29cfbce4345370cfb9cc2b6bbb30_NeikiAnalytics.dll windows:4 windows x86 arch:x86
f6b60dea35f502f01f6e13cc2bdd4598
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
LoadStringA
kernel32
GetModuleFileNameA
DeleteCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FIXEDSEG Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 865B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ