ProjectorMain
Static task
static1
Behavioral task
behavioral1
Sample
3549d8317bee8d0c1afa6f5c2c112af0_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3549d8317bee8d0c1afa6f5c2c112af0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
3549d8317bee8d0c1afa6f5c2c112af0_NeikiAnalytics
-
Size
2.0MB
-
MD5
3549d8317bee8d0c1afa6f5c2c112af0
-
SHA1
4bdea443d5ca883714e1b611fcd9d6b309a85bde
-
SHA256
81acea82b6fd8cc57535daeea6f811ee0c969fc721f4be6b2ec200e795ff2847
-
SHA512
08222d229299fbc45ee148bc54cca7c09a4f2da1786a78f3be030d3301fb8f405cb1614ed7d144d3763946facecc0c12d98a9f5be8d095746f1ed70f334c4c61
-
SSDEEP
24576:AKn/yrfijT3v0oauLP32+pcIidh6lFuzWLO4nLzXGNLh2NQ/VUt8RXqcof9Y/oJh:Sfi/38LEvva/FOLi0NKULvfeyVBD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3549d8317bee8d0c1afa6f5c2c112af0_NeikiAnalytics
Files
-
3549d8317bee8d0c1afa6f5c2c112af0_NeikiAnalytics.dll windows:4 windows x86 arch:x86
33a60b0b8824ff9d0bb6ab0899f008ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTempPathA
CreateDirectoryA
CreateFileA
RemoveDirectoryA
FindNextFileA
DeleteFileA
CloseHandle
GetSystemDirectoryA
SetErrorMode
GetModuleHandleA
FindFirstFileA
FindClose
GetShortPathNameA
GetPrivateProfileStringA
Sleep
lstrlenA
_lopen
_lwrite
GetTempFileNameA
_lcreat
LoadLibraryA
FreeLibrary
OpenFile
_llseek
_lread
_lclose
GetModuleFileNameA
user32
DispatchMessageA
TranslateMessage
SetWindowPos
GetWindowRect
wsprintfA
GetParent
ShowWindow
DrawTextA
IsDlgButtonChecked
DialogBoxParamA
EndDialog
GetDlgItem
SetWindowTextA
GetClassInfoA
GetWindowTextLengthA
MoveWindow
CallWindowProcA
PeekMessageA
GetKeyState
DefWindowProcA
PostMessageA
ReleaseDC
GetDC
SetFocus
SetForegroundWindow
DestroyWindow
MessageBoxA
LoadIconA
WaitMessage
CreateWindowExA
RegisterClassA
SendMessageA
FindWindowA
gdi32
DeleteObject
GetDeviceCaps
SelectPalette
RealizePalette
GetStockObject
SelectObject
CreatePalette
msvcrt
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
atol
_chdir
_splitpath
_makepath
strncpy
strtol
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
iml32
ord1068
ord1200
ord1502
ord1540
ord1800
ord1163
ord1407
ord1020
ord1415
ord1419
ord1432
ord1402
ord1113
ord1152
ord1150
ord1309
ord1129
ord1115
ord1429
ord1114
ord1431
ord1420
ord1130
ord1111
ord1404
ord1416
ord1418
ord1412
ord1414
ord1116
ord1317
ord1517
ord1204
ord1201
ord1314
ord1318
ord1310
ord1316
ord1780
ord1764
ord1763
ord1202
ord1232
ord1865
ord1029
ord1028
ord1112
ord1733
ord1653
ord1811
ord1601
ord1541
ord1826
ord1836
ord1609
ord1604
ord1600
ord2215
ord1810
ord1064
ord2031
ord1060
ord1656
ord1320
ord1351
ord1127
ord1815
ord1848
ord1841
ord1751
ord1132
ord1154
ord1155
ord1010
ord1011
ord1501
ord1300
ord1801
ord1013
ord1018
ord1812
ord1308
ord1128
ord1500
ord1219
ord1319
ord1215
ord1655
ord1654
ord1160
ord1126
ord2075
ord1357
ord1352
ord1356
ord1350
ord1813
ord1216
ord2043
ord2042
ord1661
ord1802
ord1832
dirapi
ord67
ord93
ord63
ord91
ord68
ord94
ord52
ord161
ord53
ord86
ord118
ord45
ord78
ord98
ord54
ord95
ord47
ord46
ord90
ord87
ord92
ord84
ord80
ord82
ord48
ord109
ord16
ord17
ord18
ord10
ord12
ord14
ord11
ord88
ord96
ord81
ord83
ord85
ord36
ord59
ord1110
ord500
ord557
ord37
ord39
ord35
ord38
ord558
ord89
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ