?Compress@@YA_NPBU_IplImage@@0M@Z
Behavioral task
behavioral1
Sample
1c579ab601e61da62c5928b37934ae5956a78f4b905c61bc926a2c087d255f41_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c579ab601e61da62c5928b37934ae5956a78f4b905c61bc926a2c087d255f41_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
General
-
Target
1c579ab601e61da62c5928b37934ae5956a78f4b905c61bc926a2c087d255f41_NeikiAnalytics.exe
-
Size
339KB
-
MD5
bd45f0fba675fac8fd694a2965125750
-
SHA1
ffda56575ea51e600854ac745e45eb70a2fecad6
-
SHA256
1c579ab601e61da62c5928b37934ae5956a78f4b905c61bc926a2c087d255f41
-
SHA512
bdeb02bf80f8e4401ee58bcc1b29ab05e589ab8a31b22a612b56082610ab00a100ec2bc1872f379b315fb72a58236ad7bc7fccecf6e6f07ae7427e87415ac7a0
-
SSDEEP
6144:xgFxFljG8WG7GEYqXlZxWe8FUuh1r8gvfayUl6+67fOMckXATyqV0xoSz:xgFxFEIrYqVD8hF8gHayUE79cs2Id
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c579ab601e61da62c5928b37934ae5956a78f4b905c61bc926a2c087d255f41_NeikiAnalytics.exe
Files
-
1c579ab601e61da62c5928b37934ae5956a78f4b905c61bc926a2c087d255f41_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 329KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE