Static task
static1
Behavioral task
behavioral1
Sample
34c34a02756d3d0861e1b66e6acd1bf0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
34c34a02756d3d0861e1b66e6acd1bf0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
34c34a02756d3d0861e1b66e6acd1bf0_NeikiAnalytics.exe
-
Size
3.4MB
-
MD5
34c34a02756d3d0861e1b66e6acd1bf0
-
SHA1
656d8287251a9fc8312ccb1514951da2e861dd04
-
SHA256
1053684d65d582d77007a04e8067533dfb17dc2fd3b8cd1009cea5e66114bb97
-
SHA512
c9e602c7dbd4133741de8f1f4f44e3134136b7d76912d075ee9cba3cc1876515ed507282acab67394b37086614267e338d63e9dab6d6d7fbc5ad324d9af113c2
-
SSDEEP
49152:JB3Gx0lrWdVLJtY2jZWJh5Bgw6c7Rx1Q+nL3NkL4R7Mr5i/U6hSYjEn7xph55F:Jx2dfjYh5Bgw6c7Rx1Q+nL3NC4RvO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34c34a02756d3d0861e1b66e6acd1bf0_NeikiAnalytics.exe
Files
-
34c34a02756d3d0861e1b66e6acd1bf0_NeikiAnalytics.exe.dll windows:6 windows x64 arch:x64
420f1b1eba5d9f1de2ccc2b639e132cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memset
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ