CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
8782a95adbb2a9ec9a3a45cce74d9a00_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8782a95adbb2a9ec9a3a45cce74d9a00_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
8782a95adbb2a9ec9a3a45cce74d9a00_NeikiAnalytics
-
Size
35KB
-
MD5
8782a95adbb2a9ec9a3a45cce74d9a00
-
SHA1
aa769bd852f021e9c29423abdecf11a06e458216
-
SHA256
07a3efdd752020e86d9c726230793d92a13d15ba40e81ecbd8eee8c3216f5c31
-
SHA512
8f21a16c37b59a8d6cbffdf27bbb619a78bad681435a1a6bee3aeefeb22d5a59329486fbe81bd9df8c3d1d5cf8f58c7b8ccb2ba0c7fc63f71c5dd0c6bd12dadd
-
SSDEEP
768:L0eKqmQmeHk+xT16QBE7pxfY/iZId0NnSOnyFdWjM/q:YjqxVHk+TsQQpxMiZo0NnSOn+/q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8782a95adbb2a9ec9a3a45cce74d9a00_NeikiAnalytics
Files
-
8782a95adbb2a9ec9a3a45cce74d9a00_NeikiAnalytics.dll windows:5 windows x86 arch:x86
e294bcd20a8d40f5d1dbfae71ff0251d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc100u
ord13214
ord7876
ord7524
ord11801
ord11683
ord4290
ord286
ord1720
ord11374
ord10969
ord11838
ord5229
ord871
ord890
ord13568
ord13571
ord13569
ord13572
ord7176
ord13570
ord10976
ord14162
ord1739
ord3625
ord8530
ord11477
ord11476
ord2629
ord285
ord5264
ord2614
ord1440
ord12153
ord1450
ord2620
ord290
ord902
ord1310
ord280
ord4086
ord7624
ord7548
ord11784
ord13854
ord4744
ord2164
ord13220
ord7108
ord13387
ord3684
ord11864
ord7126
ord13267
ord11469
ord7179
ord3416
ord5261
ord11228
ord11236
ord7391
ord9498
ord11240
ord11209
ord4642
ord4923
ord5115
ord8483
ord4901
ord5118
ord4645
ord4794
ord4623
ord6931
ord6932
ord6922
ord4792
ord7393
ord9328
ord8346
ord6140
ord1292
ord6869
ord869
ord1270
ord870
ord1271
ord5813
ord1272
ord2062
ord11544
ord868
ord2542
ord1269
ord2064
ord296
ord13381
ord1312
ord293
ord11845
ord2068
ord1298
ord13567
ord1300
ord908
ord13605
ord2091
ord322
ord2055
ord2053
ord2080
ord1984
ord2045
ord3413
ord408
ord1953
ord2090
ord2088
ord1945
ord1873
ord1934
ord323
ord1301
msvcr100
_lock
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
__CxxFrameHandler3
__dllonexit
_unlock
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memmove
setlocale
_strdup
free
kernel32
DecodePointer
GetModuleHandleW
FreeLibrary
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleFileNameW
EncodePointer
LocalAlloc
LocalFree
FindFirstFileW
FindNextFileW
FindClose
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LoadLibraryW
GetProcAddress
user32
MessageBoxW
shlwapi
PathFileExistsW
msvcp100
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ