boot_Digest__SHA1
Static task
static1
Behavioral task
behavioral1
Sample
4203b7431c07a73be7c8b8284fbb1d20_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4203b7431c07a73be7c8b8284fbb1d20_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
4203b7431c07a73be7c8b8284fbb1d20_NeikiAnalytics
-
Size
27KB
-
MD5
4203b7431c07a73be7c8b8284fbb1d20
-
SHA1
166cf6e715a09458029b3cc4c0a9ce039e89d8e3
-
SHA256
13e7fe41849fe0f3de49ddfffd63e5f90251b1d48a3829c91607160ec929f3fb
-
SHA512
353168b21516fe598963a597a76627f73d0b21cdca3cc65b324252fb07ccac62c92c26e17f409818b935c13e0cff257344aaf5c37941b59a26f1aa389a996d16
-
SSDEEP
768:DosDr+9WU9lUkLsgwIZ/SRbDeeDDDDDDDDDDDeDDDD2Ul:3+9WU9lUyq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4203b7431c07a73be7c8b8284fbb1d20_NeikiAnalytics
Files
-
4203b7431c07a73be7c8b8284fbb1d20_NeikiAnalytics.dll windows:4 windows x64 arch:x64
dd0b56eebb4b53f6fddcb350f0d377b2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcmp
memcpy
realloc
strcmp
strlen
strncmp
vfprintf
perl538
Perl_PerlIO_error
Perl_PerlIO_read
Perl_croak_nocontext
Perl_croak_xs_usage
Perl_newSVpv
Perl_newXS_deffile
Perl_safesysfree
Perl_safesysmalloc
Perl_sv_2io
Perl_sv_2iv_flags
Perl_sv_2mortal
Perl_sv_2pv_flags
Perl_sv_2pvbyte_flags
Perl_sv_derived_from
Perl_sv_newmortal
Perl_sv_reftype
Perl_sv_setref_pv
Perl_warn_nocontext
Perl_xs_boot_epilog
Perl_xs_handshake
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ