Behavioral task
behavioral1
Sample
3454eb2201aa11382578acdb181e6b30_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
3454eb2201aa11382578acdb181e6b30_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
3454eb2201aa11382578acdb181e6b30_NeikiAnalytics.exe
-
Size
45KB
-
MD5
3454eb2201aa11382578acdb181e6b30
-
SHA1
2b8ca7ff078e15c3976ea00fb4faaad1cbe9dc03
-
SHA256
afda2c3c65e78d9fa1c6dc6bdcd715dcc4e043a002c874b7226241e8ab18c2d9
-
SHA512
842f1dd1e0232902513e0d20ca8de1331e0b99363a4517045266c5e0ac9992e3ead19c0e211cbab1f8306ae70398262230b0e42efebaafce6bea6d22b3676a7c
-
SSDEEP
768:Y63bEsn3cezTC5dPZ6QbI8/8jLb2LvrDv4Uw1KKM1Xs7qefBTk:Y6r5zTOR6QkG82Lvrr4U0KKM1Xs7qL
Malware Config
Signatures
-
Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource yara_rule sample agile_net -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3454eb2201aa11382578acdb181e6b30_NeikiAnalytics.exe
Files
-
3454eb2201aa11382578acdb181e6b30_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ