Static task
static1
Behavioral task
behavioral1
Sample
835cf720be2127dd83966c0a9edd9d30_NeikiAnalytics.dll
Resource
win7-20240508-en
General
-
Target
835cf720be2127dd83966c0a9edd9d30_NeikiAnalytics.exe
-
Size
120KB
-
MD5
835cf720be2127dd83966c0a9edd9d30
-
SHA1
bda17238570f896a162d01a950054b4f457beee0
-
SHA256
c511c01c586b19dbddb26ff7fd0a7c150585c32a723ec107960a2f82b1093599
-
SHA512
c987e6dfb3fd01e8dea0aefbab74bea4eaabb51a8dc14de2f1845d5982621accdafe0b43dddf9c1e8d81ed0028dfe9003620c61affeaf388f063f5d3f49cbaff
-
SSDEEP
1536:T8CxJLQXyyj0ncl2djC5ZcLVs7kKLK8eWoaq+deMSMhnaHiXVZZ:T8uBQCWPKWiLa7kKLxJoE9dhaCXVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 835cf720be2127dd83966c0a9edd9d30_NeikiAnalytics.exe
Files
-
835cf720be2127dd83966c0a9edd9d30_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ