tarm
Static task
static1
Behavioral task
behavioral1
Sample
4ddfd5dd10ae7cd100e43d762a561c40_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4ddfd5dd10ae7cd100e43d762a561c40_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
4ddfd5dd10ae7cd100e43d762a561c40_NeikiAnalytics
-
Size
54KB
-
MD5
4ddfd5dd10ae7cd100e43d762a561c40
-
SHA1
0ac5b17b33d6f8f0375182eacba9b0b9dc0c5b74
-
SHA256
c4a0e159a1db6818cc3ca919e7ac3f40c80a5b9ecf4d54449825e00da2346c9e
-
SHA512
7316f260c63bb1b1206485d041ac8e285e226ef7f2eccbef11ec3f23b95c2db190637b6079947a9e83543a2be064a0e97d4f71f53511eb112256cb01f2ff6547
-
SSDEEP
1536:Nj3xV9I7rydtM7UoH1Kewoc4SBaG0XP0:N/VdtM7t1pwocrBaG0/0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ddfd5dd10ae7cd100e43d762a561c40_NeikiAnalytics
Files
-
4ddfd5dd10ae7cd100e43d762a561c40_NeikiAnalytics.dll windows:5 windows x86 arch:x86
cd7d390fcfa80d915fd02fd4701c75d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ccs.exe
Jtag_StateMove
Jtag_ScanIn
Jtag_ScanIO
Jtag_ScanOut
CCTDeleteCCInfo
CCTNewCCInfo
kernel32
InterlockedDecrement
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
HeapReAlloc
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
DecodePointer
GetCommandLineA
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Exports
Exports
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ