Static task
static1
Behavioral task
behavioral1
Sample
89e46153d428fec4239503765c83adf0_NeikiAnalytics.dll
Resource
win7-20240221-en
General
-
Target
89e46153d428fec4239503765c83adf0_NeikiAnalytics.exe
-
Size
120KB
-
MD5
89e46153d428fec4239503765c83adf0
-
SHA1
5db7d9495ec9451737f65727530c3735da6e2fb0
-
SHA256
8ea96c78d3b780edcc6df7ef6bc70d150a05ec41d28c5e260bdece033e1837c4
-
SHA512
9e4451d04edfc3c65587b6b20840d298efbae3244195580d3336275fc8064e3f545a3bce8b1ae44186003d5928cbd4b8310ba87e044541ba6e8c519b8dc99057
-
SSDEEP
3072:qgiawSKcuj9DkEiWZYYM43YsIWmpk+rE90:DNwiu1kEd5M1pk8ES
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 89e46153d428fec4239503765c83adf0_NeikiAnalytics.exe
Files
-
89e46153d428fec4239503765c83adf0_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ