Behavioral task
behavioral1
Sample
0b34b437e9f1a838a63e08acf588dd82539081b881903a597b3e8e4f6a80f87b_NeikiAnalytics.dll
Resource
win7-20240220-en
General
-
Target
0b34b437e9f1a838a63e08acf588dd82539081b881903a597b3e8e4f6a80f87b_NeikiAnalytics.exe
-
Size
3.7MB
-
MD5
23f774f662a148634d48dc44b922f240
-
SHA1
61220fc5e2570cc428987b6f7588e07dad715f3f
-
SHA256
0b34b437e9f1a838a63e08acf588dd82539081b881903a597b3e8e4f6a80f87b
-
SHA512
e2094792c3aa4c71c5fa6db9cadba58487ae635d4364a37bfbb5f197031a43305449b276491c968758cb954f0eff24359d102488661539591c362f33a064053f
-
SSDEEP
98304:YKXMJKSQ/XYSIIPk3IbfyXwmFqHft916eUD5hWf+279ZMbh:jEKSaXKIuZFqHv1DUCf+2oh
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b34b437e9f1a838a63e08acf588dd82539081b881903a597b3e8e4f6a80f87b_NeikiAnalytics.exe
Files
-
0b34b437e9f1a838a63e08acf588dd82539081b881903a597b3e8e4f6a80f87b_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ