PyInit__imagingft
Static task
static1
Behavioral task
behavioral1
Sample
7d035e4c545bc054c7e4fbcf55285be0_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7d035e4c545bc054c7e4fbcf55285be0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
7d035e4c545bc054c7e4fbcf55285be0_NeikiAnalytics.exe
-
Size
28KB
-
MD5
7d035e4c545bc054c7e4fbcf55285be0
-
SHA1
ec07a8f8fdf24e21fa9a645a997a679d5a239d1b
-
SHA256
c27bf37b429e34a3694b1d784a39973b03a4ccc89695958d61bc9b83355de421
-
SHA512
d9dbb754fe6725dce1eac634066989f0aca91bba059adba16326b21514f305769b755ffb3e80e87005b53502c88c1ffd10bd07a608689e3b3702a98e0a65e7d0
-
SSDEEP
384:+/ZBlPq1TM8FgKpgWKGmgmvy4hG0DlVJ+vFZmYgx+B/ED9geRkxa8cfR:jo8FgQgHvPDjJ+vFIYhxZeRD8w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d035e4c545bc054c7e4fbcf55285be0_NeikiAnalytics.exe
Files
-
7d035e4c545bc054c7e4fbcf55285be0_NeikiAnalytics.exe.dll windows:6 windows x64 arch:x64
b4e313deddd77d498460d2fc8c3294cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
freetype
FT_Request_Size
FT_Palette_Set_Foreground_Color
FT_Load_Glyph
FT_Bitmap_Init
FT_Get_MM_Var
FT_New_Memory_Face
FT_Bitmap_Done
FT_Get_Sfnt_Name
FT_Init_FreeType
FT_Bitmap_Convert
FT_Done_MM_Var
FT_Get_Sfnt_Name_Count
FT_Library_Version
FT_Done_Face
FT_Done_Glyph
FT_Get_Kerning
FT_Select_Charmap
FT_Stroker_New
FT_Set_Named_Instance
FT_Stroker_Set
FT_New_Face
FT_Get_Char_Index
FT_Get_Glyph
FT_Glyph_Stroke
FT_Glyph_To_Bitmap
FT_Set_Var_Design_Coordinates
FT_Glyph_Get_CBox
FT_Stroker_Done
python310
PyObject_Size
PyUnicode_FromString
Py_FileSystemDefaultEncoding
PyList_SetItem
PyMem_Malloc
PyExc_TypeError
_PyObject_New
PyNumber_Check
PyExc_OSError
PyErr_NoMemory
PyMem_Free
PyList_GetItem
PyObject_GetAttrString
PyType_Ready
PyModule_Create2
PyList_New
PyUnicode_FromFormat
PyLong_AsLong
_PyArg_ParseTuple_SizeT
PyObject_Free
PyDict_New
_Py_Dealloc
PyType_IsSubtype
PyFloat_Type
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyExc_ValueError
PyErr_SetString
PyDict_SetItemString
PyLong_AsLongLong
_Py_NoneStruct
PyFloat_AsDouble
PyExc_MemoryError
PyLong_FromLong
PyErr_Occurred
PyExc_KeyError
PyLong_AsSsize_t
_PyObject_CallFunction_SizeT
_Py_BuildValue_SizeT
PyBool_FromLong
PyModule_GetDict
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memset
memcpy
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_cexit
_initterm
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
api-ms-win-crt-math-l1-1-0
ceil
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ