Static task
static1
Behavioral task
behavioral1
Sample
a991cbd4b23c71a49c53ad40295e36a0_NeikiAnalytics.dll
Resource
win7-20240508-en
General
-
Target
a991cbd4b23c71a49c53ad40295e36a0_NeikiAnalytics.exe
-
Size
120KB
-
MD5
a991cbd4b23c71a49c53ad40295e36a0
-
SHA1
a31c8d2b2ee268a8087f5eda4bc0871b96214206
-
SHA256
c975d4b915110a5d7fa6a1dea1a00e12da00aa95183a44881e2a37a62972b326
-
SHA512
32f228067eb726044a979f10597b112cc0565988623130634f1bfbbc262543b72d2adbae999a3f8a73e81d0f5911c2ec5a763197536d18a4cf3bace8704cf66e
-
SSDEEP
3072:J1Y9Q+ttAcA333UIdsWpc9xoOowK+YFpv:rYSrHdsW69xoOowKFz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a991cbd4b23c71a49c53ad40295e36a0_NeikiAnalytics.exe
Files
-
a991cbd4b23c71a49c53ad40295e36a0_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ