Static task
static1
Behavioral task
behavioral1
Sample
19a656bd82fe81dbe2defb0a0971ce80_NeikiAnalytics.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
19a656bd82fe81dbe2defb0a0971ce80_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
19a656bd82fe81dbe2defb0a0971ce80_NeikiAnalytics.exe
-
Size
21KB
-
MD5
19a656bd82fe81dbe2defb0a0971ce80
-
SHA1
daefe620a9f65261107f96d5ec703a27c41605e0
-
SHA256
63ab0de41a3ebae2d3c783288aa6d3a03174059a0ca8402743bb248889dd98eb
-
SHA512
3d6b1c8fa779aa880a880ee663816a4d702574ecff35e192248f533aedd98b27da5d4ac18541e0c15507cdf820ec29e738c5634ca6375fcd0d87d2f96f0dcda2
-
SSDEEP
384:2912eop8vbvJykjl+YOGxE+9FinuOxA0BGy2iK/WoBEzB5:29goDl+Y7xZ8xxAMGy2t9yB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19a656bd82fe81dbe2defb0a0971ce80_NeikiAnalytics.exe
Files
-
19a656bd82fe81dbe2defb0a0971ce80_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
452d19117ddea2739393fea7e8fe1edc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
RtlRandom
memset
kernel32
CloseHandle
GetSystemDirectoryW
CreateProcessW
GetTempPathW
GetTempFileNameW
HeapCreate
GetCommandLineW
LoadLibraryA
FreeLibrary
CreateDirectoryW
GetVersion
CreateEventW
SetEvent
Sleep
WriteFile
VirtualAlloc
VirtualFree
CreateFileW
OpenProcess
GetLastError
FindFirstFileW
FindNextFileW
FindClose
HeapAlloc
HeapFree
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetTickCount
ResetEvent
GetCurrentProcessId
advapi32
StartServiceW
OpenServiceW
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
ConvertStringSecurityDescriptorToSecurityDescriptorA
shell32
CommandLineToArgvW
ShellExecuteW
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ