Static task
static1
Behavioral task
behavioral1
Sample
d937cbac4c3453da1d106acbf5614730_NeikiAnalytics.dll
Resource
win7-20240221-en
General
-
Target
d937cbac4c3453da1d106acbf5614730_NeikiAnalytics
-
Size
120KB
-
MD5
d937cbac4c3453da1d106acbf5614730
-
SHA1
22b284e66b7876e4e39faec286abaf38b9048706
-
SHA256
62ff0a3e3ca95b1f178b5bc531725a3561f2b4f0d55fa0618ca220b26481bcb3
-
SHA512
e65fe35494a2b3d920ad9e9d7b607c8b54f07049f6bd205e42b86c5862919ba431adf585c2c6e5547643084c06ebcebcbdaf294841f44955439ef9e5217b1b1b
-
SSDEEP
1536:d/hdnoLcNrt0zBK6RcpndU8wHT6TP8QxpjUL5jGD6E4qiTgZbWzG2:NfoL60zc62pdU8GT6T0Qxpje0D147gp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d937cbac4c3453da1d106acbf5614730_NeikiAnalytics
Files
-
d937cbac4c3453da1d106acbf5614730_NeikiAnalytics.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ