Behavioral task
behavioral1
Sample
155e9a0e0189d34d635b063194a709d0_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
155e9a0e0189d34d635b063194a709d0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
155e9a0e0189d34d635b063194a709d0_NeikiAnalytics
-
Size
2KB
-
MD5
155e9a0e0189d34d635b063194a709d0
-
SHA1
49351ecbdadb0f92be80cfdef75960c9e4611d54
-
SHA256
d5b8ab3e382422e8d4787ee8f56a8617185a27ee1c70e41128bd5ee88baa118c
-
SHA512
f7e1f1b052dc9c5991bec0f6bcba0be60d9a5c3b17736aa9fd7208950cdcab41c6ebc525028c73317f3e6361ac8dc88d2fb21f300364a6ce24fab553b6ac68a8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 155e9a0e0189d34d635b063194a709d0_NeikiAnalytics
Files
-
155e9a0e0189d34d635b063194a709d0_NeikiAnalytics.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE