Static task
static1
Behavioral task
behavioral1
Sample
5ffc294418df3aa9d2cf2f80d3b2dbe0_NeikiAnalytics.dll
Resource
win7-20240220-en
General
-
Target
5ffc294418df3aa9d2cf2f80d3b2dbe0_NeikiAnalytics
-
Size
120KB
-
MD5
5ffc294418df3aa9d2cf2f80d3b2dbe0
-
SHA1
c4dcfef2f70ad4b200b2cbb5fd4f04c3913514c8
-
SHA256
461a9d46a792f77f19b5766e5b3f9dd0e946a04a13f2f2ea5feb053dab64f430
-
SHA512
343baa1cef9b3ab967ec15f61760960a8642288c190cb93a33159269f70c011bbefd2500b0291105759faefd93f81e5dab13a77bac8d54b0f883916bcc277fba
-
SSDEEP
1536:W+1xGWQhpyHSj/S2FQWFh8SI8/w4jrAqwAeyw0+oEIhuyNKEQJnpSE3WauBh5eEN:WaxLyj4WLA844j2xIBNKdrnuL5SU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ffc294418df3aa9d2cf2f80d3b2dbe0_NeikiAnalytics
Files
-
5ffc294418df3aa9d2cf2f80d3b2dbe0_NeikiAnalytics.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ