Static task
static1
Behavioral task
behavioral1
Sample
6e5ef71e36df46d087e1949a83180640_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6e5ef71e36df46d087e1949a83180640_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
6e5ef71e36df46d087e1949a83180640_NeikiAnalytics
-
Size
8KB
-
MD5
6e5ef71e36df46d087e1949a83180640
-
SHA1
ae26cd80e6b66fe39cd319bc51848d7717c11f0e
-
SHA256
1bb04c601d42dcc84c33a8e12fbc91bde0eb5cd4731269e17a318c8d95f193b7
-
SHA512
f49d77452777a742d969b782b99165742b7eca399dcb393ac29a43daee28dfab876c7a4e5a78656ab9242fb88474e8e1189b98a862e4053126e9e374d50258a7
-
SSDEEP
192:Pfj+m8uPYwVJmc6g6NU5FreZAbcB+FGglBn8IklC:PRPPGPxNireOccGg4I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e5ef71e36df46d087e1949a83180640_NeikiAnalytics
Files
-
6e5ef71e36df46d087e1949a83180640_NeikiAnalytics.dll windows:4 windows x86 arch:x86
ac15b77649ac3708fbdc06b0ca3b295c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
carclw60
GOL$58
CARC__ExitInstance
CARC__StopRun
GOL$A8
GOL$85
GOL$55
GOL$VN_ASCII_SIGN_TABLE
CARC__EnterInstance
GOL$D5
GOL$M5
GOL$S8
GOL$C8
_CARC__LibraryMain@12
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RCLID_TE Size: 512B - Virtual size: 487B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCLEP_DA Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 142B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ