WEP
Static task
static1
Behavioral task
behavioral1
Sample
d02f15f6cb879f184c1d5db5dc904260_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d02f15f6cb879f184c1d5db5dc904260_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
d02f15f6cb879f184c1d5db5dc904260_NeikiAnalytics
-
Size
86KB
-
MD5
d02f15f6cb879f184c1d5db5dc904260
-
SHA1
c52db19132de6e11376807a55c6e5c997a8376bd
-
SHA256
bcb175aac403f87ab3cee9474b2bd9198818ef56e2ee6c189818cd954ed07c3b
-
SHA512
963fbc9fe9aa53ad7f4f9c616e7f1636377a1b8db171bf57d5e4f87c48b64518ddcd7f07de41e3289df2585e7d1a539e74a308ef812338a17f8f73e9ce9cdaba
-
SSDEEP
768:m9/xusk9YGIQn4dt4Gzcacgzw4mFbAs+YAoGDz6uuTWkeOe8F+sE9Wp5EJC7ym67:m/xwyQ4O00ZFO6FkeFFEuim6ULvjYv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d02f15f6cb879f184c1d5db5dc904260_NeikiAnalytics
Files
-
d02f15f6cb879f184c1d5db5dc904260_NeikiAnalytics.dll windows:4 windows x86 arch:x86
f6b60dea35f502f01f6e13cc2bdd4598
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
LoadStringA
kernel32
GetModuleFileNameA
DeleteCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FIXEDSEG Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 865B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ