Static task
static1
Behavioral task
behavioral1
Sample
6321294109c6cb8c29d6c2021997e8a0_NeikiAnalytics.dll
Resource
win7-20240221-en
General
-
Target
6321294109c6cb8c29d6c2021997e8a0_NeikiAnalytics
-
Size
120KB
-
MD5
6321294109c6cb8c29d6c2021997e8a0
-
SHA1
04deb2b4da83771fda0bc1ceeb679b6a08c82e76
-
SHA256
eae001bed0d0a6aebd05a2644e74c4bef32c3d8ca038f511fb8b89bdb08043fc
-
SHA512
933fe408c3c98f7f756a8b51302e5d31e8d5d4af4ada764bfa73604fa22e1f501c3f37d5c83a697ed64476ce42053c30afd50e2e0b33c8ba23564298e557b2d7
-
SSDEEP
1536:0EwFtc1C8z+svkyuvvbAmcTS8h8JXrYA+JC8VAL9d+xsTyyeGymt+Pp:01t18z+sBuvv8mIS8G1+JCCKOVGxtE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6321294109c6cb8c29d6c2021997e8a0_NeikiAnalytics
Files
-
6321294109c6cb8c29d6c2021997e8a0_NeikiAnalytics.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ