SBRVDBLK
Static task
static1
Behavioral task
behavioral1
Sample
632a3c7b9627d8afc35475fa55b291f1b12bb6f2b5f972d7849a080e5054f00a_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
632a3c7b9627d8afc35475fa55b291f1b12bb6f2b5f972d7849a080e5054f00a_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
632a3c7b9627d8afc35475fa55b291f1b12bb6f2b5f972d7849a080e5054f00a_NeikiAnalytics.exe
-
Size
39KB
-
MD5
ffef1262c9dd30cdec5c434d25c871c0
-
SHA1
d07445efe6da31c3b6530105a475c79598fecbc7
-
SHA256
632a3c7b9627d8afc35475fa55b291f1b12bb6f2b5f972d7849a080e5054f00a
-
SHA512
115307f25cddc705f26557c8c72e18bedfd8f10e9b8ca8820471602db1f82c50cd4fb62fad44e0397058258771319f14d75f9b9f910075b4798fca9921dc39e6
-
SSDEEP
768:GWXOQDr2T51QdbcEpvKbRys+7sbre9B92:GooEdbcEpSbe7sb7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 632a3c7b9627d8afc35475fa55b291f1b12bb6f2b5f972d7849a080e5054f00a_NeikiAnalytics.exe
Files
-
632a3c7b9627d8afc35475fa55b291f1b12bb6f2b5f972d7849a080e5054f00a_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
24bad4f1681187755f494f78e929c9c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ucscrt
Display_L5ToI32
Comp4_L2ToI32
Comp4_L4ToI32
DisplayToNumericEdited
Display_L2ToI32
IncrementComp4
IsAllLess
Comp4_L2ToI64
CheckVmod
I32ToComp4_L4
IsNumericDisplay
IsAllEqual
I32ToComp4_L2
g_szCurrentModule
GetDLLPtr
g_dwCurrentLineNumber
msvcrt
_adjust_fdiv
malloc
_initterm
free
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ