Static task
static1
Behavioral task
behavioral1
Sample
c05ae95266ecbc3646c084a5196acaa0_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c05ae95266ecbc3646c084a5196acaa0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
c05ae95266ecbc3646c084a5196acaa0_NeikiAnalytics
-
Size
3.1MB
-
MD5
c05ae95266ecbc3646c084a5196acaa0
-
SHA1
ae7c32f7aaacfa6646914686232ca5b3e93a83b4
-
SHA256
2a77d13e1776146877655a6e770c0a0101ac79935fa9c4167dafe4d03e39c313
-
SHA512
7e6917dcde12368816f098671e122481f824ab2c024bf9afa9c5b3dec6b5a481a8bfa5ebfbb49c162330b7b36a5c9f36a7674388ea0b988a5037c6ab6d2bbe7e
-
SSDEEP
98304:g3gikNDMgAMVCn+qvsgz6nXNlif/sYX9Z:g3giiPVCn+q0Xa8YNZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c05ae95266ecbc3646c084a5196acaa0_NeikiAnalytics
Files
-
c05ae95266ecbc3646c084a5196acaa0_NeikiAnalytics.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 609KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.of0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.of1 Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.of2 Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ