_G_aorp_module
Static task
static1
Behavioral task
behavioral1
Sample
22100a4ed532b8df89349f819fa7bda782a42de4bc2693c254bd696cce76846c_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22100a4ed532b8df89349f819fa7bda782a42de4bc2693c254bd696cce76846c_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
22100a4ed532b8df89349f819fa7bda782a42de4bc2693c254bd696cce76846c_NeikiAnalytics.exe
-
Size
13KB
-
MD5
fde0f74ac5395b1130d46b576df36be0
-
SHA1
a3712ab8af1b9438dccf97d4a30aa2dbfb5629af
-
SHA256
22100a4ed532b8df89349f819fa7bda782a42de4bc2693c254bd696cce76846c
-
SHA512
9ebfb5f53bebb40241998c1d35ce0544a41f32b1e66488e8506222f93644b82e35b9decf14b07d2e1873c37abde33374a801f210de75e6233294709dfda772f4
-
SSDEEP
96:o731r+6CNmCyFfxqk2aTgn7aN872+Jd8V3iT/j3DFrXCWU/E+1+/91B/3LoQHo9e:oQ4dlo887MV3iT/j3NXCWU/E+4/917Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22100a4ed532b8df89349f819fa7bda782a42de4bc2693c254bd696cce76846c_NeikiAnalytics.exe
Files
-
22100a4ed532b8df89349f819fa7bda782a42de4bc2693c254bd696cce76846c_NeikiAnalytics.exe.dll windows:6 windows x64 arch:x64
c71deabd5f1d891c231c9cb512fc6ea5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
bo-2
_AorpSelistPushback_nlk
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_seh_filter_dll
_cexit
_initterm
_initterm_e
abort
_crt_atexit
kernel32
InitializeSListHead
GetModuleHandleA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
api-ms-win-crt-string-l1-1-0
memset
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ