Static task
static1
Behavioral task
behavioral1
Sample
558241a9d2cd475c0d83c704b8339a90_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
558241a9d2cd475c0d83c704b8339a90_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
558241a9d2cd475c0d83c704b8339a90_NeikiAnalytics.exe
-
Size
21KB
-
MD5
558241a9d2cd475c0d83c704b8339a90
-
SHA1
869eb2a7d06f3e223d3a9cf38cb715a180290b87
-
SHA256
7cbd3f80b533384d436cbf4609aba309118d701264a3f9c20f31550233ffb99a
-
SHA512
9bfcee9a82be179eb4d0a45ebe8fa4c41d78484199821466b00433cac0f35739983f2875cca1746cefe3a00e79d2ba1085137bd852c7732a127e8082fe02c1a1
-
SSDEEP
384:2912eop8vbvJykjl+YOGxE+9FinuOxA0BGy2iK/WoBEYYAB5:29goDl+Y7xZ8xxAMGy2t9pB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 558241a9d2cd475c0d83c704b8339a90_NeikiAnalytics.exe
Files
-
558241a9d2cd475c0d83c704b8339a90_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
452d19117ddea2739393fea7e8fe1edc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
RtlRandom
memset
kernel32
CloseHandle
GetSystemDirectoryW
CreateProcessW
GetTempPathW
GetTempFileNameW
HeapCreate
GetCommandLineW
LoadLibraryA
FreeLibrary
CreateDirectoryW
GetVersion
CreateEventW
SetEvent
Sleep
WriteFile
VirtualAlloc
VirtualFree
CreateFileW
OpenProcess
GetLastError
FindFirstFileW
FindNextFileW
FindClose
HeapAlloc
HeapFree
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetTickCount
ResetEvent
GetCurrentProcessId
advapi32
StartServiceW
OpenServiceW
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
ConvertStringSecurityDescriptorToSecurityDescriptorA
shell32
CommandLineToArgvW
ShellExecuteW
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ