UsUer
Behavioral task
behavioral1
Sample
12d495dc95fb0585bbabc843626a4a9ffcfd4f057940a6d80bc0c50ef3a94212_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
12d495dc95fb0585bbabc843626a4a9ffcfd4f057940a6d80bc0c50ef3a94212_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
12d495dc95fb0585bbabc843626a4a9ffcfd4f057940a6d80bc0c50ef3a94212_NeikiAnalytics.exe
-
Size
398KB
-
MD5
53a948a7d4b5ede7c33779a0a51e02f0
-
SHA1
0c2a92a2f40d4306acc34ed220f0623be6788f5d
-
SHA256
12d495dc95fb0585bbabc843626a4a9ffcfd4f057940a6d80bc0c50ef3a94212
-
SHA512
d7b75e618452526a0320a68b4ca42a44e8ca1e06c1de4103a9c25b71090c6640e6ff809cb4c7a39f8547f20526ee9a05481638d560595b0a8828974f0ce75bd2
-
SSDEEP
6144:dMIeGRHjmO1Uzw4bATNhMF7NVwI//VYxZI5LUQq9pJSe4H0AYNPLp:dKGRHK8IwmMvMFpKIVYHI5YjnSegRap
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12d495dc95fb0585bbabc843626a4a9ffcfd4f057940a6d80bc0c50ef3a94212_NeikiAnalytics.exe
Files
-
12d495dc95fb0585bbabc843626a4a9ffcfd4f057940a6d80bc0c50ef3a94212_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 29KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE