Initialize
Static task
static1
Behavioral task
behavioral1
Sample
0fb5b3c982be214d4871b71ceed791d0_NeikiAnalytics.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0fb5b3c982be214d4871b71ceed791d0_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
General
-
Target
0fb5b3c982be214d4871b71ceed791d0_NeikiAnalytics.exe
-
Size
584KB
-
MD5
0fb5b3c982be214d4871b71ceed791d0
-
SHA1
250e98786e6060167265ab8c2d6d662f1837e4aa
-
SHA256
4fb4d6d12bd4454f21fa0164ee9dfd799f37273d86c902e2579c719fc217c447
-
SHA512
1fbda8e0a11cdf0b0af7c18674aad93458b3f3836333933b93425de32af5f1ceaa1397114d125cd37e78ae97fcfe9bada6a20a519f93dd37ed97abe3f40b6300
-
SSDEEP
12288:ih1n0wBAW7hkEQqa830xXkflDtzOTICZulWDMxQV:M10wDNkEQbkflhzmXZnDMx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb5b3c982be214d4871b71ceed791d0_NeikiAnalytics.exe
Files
-
0fb5b3c982be214d4871b71ceed791d0_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
a68d222d9de3978db7f257238f7d1f18
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateDirectoryA
FindFirstFileA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetFileAttributesA
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetStringTypeA
GetTempFileNameA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
LCMapStringA
GetStartupInfoA
SetEnvironmentVariableA
SetStdHandle
ReadFile
SetFilePointer
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsBadCodePtr
HeapSize
IsBadWritePtr
WriteFile
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
VirtualQuery
GetSystemInfo
CompareStringA
VirtualAlloc
SetLastError
LoadLibraryA
InterlockedExchange
FreeLibrary
GetProcAddress
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
Sleep
CloseHandle
VirtualProtect
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
MulDiv
RtlUnwind
RaiseException
GetTimeFormatA
GetDateFormatA
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapReAlloc
HeapAlloc
GetTimeZoneInformation
GetSystemTimeAsFileTime
IsBadReadPtr
TlsAlloc
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
FlushFileBuffers
user32
MessageBoxW
GetSystemMetrics
MessageBoxA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
Exports
Exports
Sections
.text Size: 464KB - Virtual size: 462KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ