Static task
static1
Behavioral task
behavioral1
Sample
3e36e96928247fc44c957c4c7c92e530_NeikiAnalytics.dll
Resource
win7-20240220-en
General
-
Target
3e36e96928247fc44c957c4c7c92e530_NeikiAnalytics.exe
-
Size
120KB
-
MD5
3e36e96928247fc44c957c4c7c92e530
-
SHA1
cc8d8deb5d477d5fd815022314387e50f2fe5c71
-
SHA256
8d955657e3a5055442d25f8f506b51c3b972f32f8731b29ba828382bcd55beb9
-
SHA512
b79758f55c9fcf19f603cab2da80787ca351e3edd48db7f6e6e7f4dc8a1a984ae8995a5c864ad7c0a427bd2145c6a92e11199022c0e26a1a2c5524434237e417
-
SSDEEP
3072:BFJufv+mZrja1HjBo6m/kPBkY9YdG3Dq5bLT:BL9AnaxdXm4kaYdG3Dq5bLT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3e36e96928247fc44c957c4c7c92e530_NeikiAnalytics.exe
Files
-
3e36e96928247fc44c957c4c7c92e530_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ