Static task
static1
Behavioral task
behavioral1
Sample
e81630ac3e5ba5d5b3ed8ab849582ea0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e81630ac3e5ba5d5b3ed8ab849582ea0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
e81630ac3e5ba5d5b3ed8ab849582ea0_NeikiAnalytics.exe
-
Size
2.5MB
-
MD5
e81630ac3e5ba5d5b3ed8ab849582ea0
-
SHA1
118f1e23c8a8e0e063dcc88b6089d52e1dc7e8b2
-
SHA256
e8276e8ad213342d406b424b534244f93fbc1b0c4279896eafd589b5a6f03ac2
-
SHA512
9eee90c63e407db7130445428944ffe34272ed29e9c0f59a003fad566114eb5ade302d12ef00eb60f73782bc59be66ecb72c02c23f397df1d298a61a8e93d9a1
-
SSDEEP
49152:PPb7c4h3zNerf+yIylN8NVrRqjIdwuGo8XGNEEIMK:3b75h3zsC9g+VRq1jYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e81630ac3e5ba5d5b3ed8ab849582ea0_NeikiAnalytics.exe
Files
-
e81630ac3e5ba5d5b3ed8ab849582ea0_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
e53f7ade3d8b489952f8b16a550791ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReleaseMutex
CloseHandle
ChangeTimerQueueTimer
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetTimeZoneInformation
DeleteCriticalSection
LoadLibraryW
LoadLibraryExW
GetBinaryTypeW
GetModuleFileNameW
SetStdHandle
SetUnhandledExceptionFilter
RtlUnwind
IsDebuggerPresent
user32
GetMessageA
ToUnicodeEx
AdjustWindowRectEx
advapi32
DuplicateTokenEx
QueryServiceStatus
GetPrivateObjectSecurity
RegReplaceKeyW
gdi32
GetEnhMetaFileHeader
CombineRgn
ole32
StringFromIID
ws2_32
WSAGetLastError
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.code Size: 488KB - Virtual size: 489KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lq8zSJD Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hm299*2 Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=Womat6 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 664KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ