ShqesnhytdewLniy
Static task
static1
Behavioral task
behavioral1
Sample
cfe95f6e77d9fe040a9f39c8437fca00_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
cfe95f6e77d9fe040a9f39c8437fca00_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
cfe95f6e77d9fe040a9f39c8437fca00_NeikiAnalytics
-
Size
3.2MB
-
MD5
cfe95f6e77d9fe040a9f39c8437fca00
-
SHA1
d3c23310765f4af90c190cb70233b1c844e5f5d9
-
SHA256
a2eb8460f8bf6aafaf10263c22ac7fc6dd2d9be452ab32c9de1d0c9ee682467d
-
SHA512
9d6557f60559bca5970f52993386aa3cbf3ecae266f55951cbcc6bf2170d118ea21a936f9092b6892fce20afa98c59e9931d8b6efe4c6d5ca31ececb5fe95697
-
SSDEEP
49152:j1aW1kMLd6Ad6+9Gy6uGyD2eh10T0GYyZOmJ2z76oKBaA:jP10Ac+cy6e7h10T0GbrJ2z/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfe95f6e77d9fe040a9f39c8437fca00_NeikiAnalytics
Files
-
cfe95f6e77d9fe040a9f39c8437fca00_NeikiAnalytics.dll windows:5 windows x86 arch:x86
34baddcb966241bb96fccb94e30af932
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
UpdateColors
GetObjectType
GetCurrentObject
user32
BringWindowToTop
CharPrevExA
powrprof
WriteGlobalPwrPolicy
kernel32
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetCurrentThreadId
SetUnhandledExceptionFilter
GetModuleHandleW
OutputDebugStringA
GetModuleFileNameW
GetACP
GetUserDefaultLangID
GetStringTypeExW
GetBinaryTypeW
TerminateProcess
IsDebuggerPresent
oleaut32
SysAllocStringLen
advapi32
SetServiceBits
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 189B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 500KB - Virtual size: 498KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ