main
Static task
static1
Behavioral task
behavioral1
Sample
caae7094eafbb2ca14456dabb7a9b270_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
caae7094eafbb2ca14456dabb7a9b270_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
caae7094eafbb2ca14456dabb7a9b270_NeikiAnalytics.exe
-
Size
56KB
-
MD5
caae7094eafbb2ca14456dabb7a9b270
-
SHA1
faa8b049e3e2cb78a1320ec91ca4fbb88f600188
-
SHA256
2c1fee57f6da43479e49d98215d437b514d3fad5970fef10b56f3c9b7c146d48
-
SHA512
3f8848673a641a17ed1cb0da16a7b7b7f769ad1692eb552e5e225df23b6692e4d46ea53241c906c64ee10c40c5458f90a03a08b37e2cd74ccc3741a444a80396
-
SSDEEP
768:dw2p4yq4Dl6nQDRmISra5fiB9AyrhtvnOgorH:dN2y9Dl6QDZS+YRor
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caae7094eafbb2ca14456dabb7a9b270_NeikiAnalytics.exe
Files
-
caae7094eafbb2ca14456dabb7a9b270_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
a579452283bd6156531015be586c1449
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gsemul
ord302
kernel32
GetCommandLineA
GetVersion
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
GetProcAddress
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetLastError
SetFilePointer
SetUnhandledExceptionFilter
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ