crys
Static task
static1
Behavioral task
behavioral1
Sample
e0c633e01c4f4b7b3d471fe7d55e6320_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0c633e01c4f4b7b3d471fe7d55e6320_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
e0c633e01c4f4b7b3d471fe7d55e6320_NeikiAnalytics
-
Size
3KB
-
MD5
e0c633e01c4f4b7b3d471fe7d55e6320
-
SHA1
5186f4581df90639f9af78790f4d06f5a56e68f5
-
SHA256
7a8ea6fb0de6e27a3b9c1d0fbe99ec25612758f2aef19ae98966180b98165684
-
SHA512
2733b0be011853ace930651ff7b498ffcd0273d3bb7587fc06d6d1f7014e9405f70ef4de7a9b600e62f4aa80b3582359622a276a563b0b0be54a3c725372375e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0c633e01c4f4b7b3d471fe7d55e6320_NeikiAnalytics
Files
-
e0c633e01c4f4b7b3d471fe7d55e6320_NeikiAnalytics.dll windows:5 windows x86 arch:x86
e97a70102cce77bfe0dc571cb46a4352
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
user32
MessageBoxA
shell32
ShellExecuteW
msvcrt
_adjust_fdiv
free
_initterm
malloc
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 559B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ