XtcDrvProc
Static task
static1
Behavioral task
behavioral1
Sample
e7a941ac7da50b05aadb96e652f731c0_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e7a941ac7da50b05aadb96e652f731c0_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
General
-
Target
e7a941ac7da50b05aadb96e652f731c0_NeikiAnalytics.exe
-
Size
28KB
-
MD5
e7a941ac7da50b05aadb96e652f731c0
-
SHA1
f70550600d684b5c232a9e4cca8c5ed933da9075
-
SHA256
3aba452a515506626e0efcf2eba35b674a3df12e5e8238d749f7f8bc0c79a2ff
-
SHA512
8b836ff8149ad64bac3038b4b841d1d65e8682c81b27bc5e3e00f941c8f49f08cfd870dd3a61844339a140f27ad85330d6931bdb82767a3418d30cd1378c9779
-
SSDEEP
384:+OQh9HtliHftKpx4Sd3o1uYgaf7VUyem:hO9HtlWfEpx4Sd3o1uYgaCye
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7a941ac7da50b05aadb96e652f731c0_NeikiAnalytics.exe
Files
-
e7a941ac7da50b05aadb96e652f731c0_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
c693202ec4c1d752bad07fe030ecab8c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
_llseek
_lclose
OpenFile
GlobalLock
_lwrite
lstrcatA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalAlloc
lstrlenA
user32
PostMessageA
LoadStringA
MessageBoxA
SendMessageA
CreateWindowExA
RegisterClassA
UnregisterClassA
DefWindowProcA
PostQuitMessage
DestroyWindow
wsprintfA
framemng32
?Iwnd@@YAPAVICWNDmng@@XZ
wsock32
setsockopt
WSAStartup
WSACleanup
closesocket
socket
WSAAsyncSelect
bind
recvfrom
sendto
gethostbyname
ioctlsocket
msvcrt
_adjust_fdiv
malloc
_initterm
free
strlen
strcmp
memcpy
atol
atoi
memset
_chsize
_strnicmp
_daylight
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 834B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ