Behavioral task
behavioral1
Sample
60a43c401300269ebed93b4e7820160830a9b800d09de20f5fcc713f8487810e_NeikiAnalytics.dll
Resource
win7-20240611-en
General
-
Target
60a43c401300269ebed93b4e7820160830a9b800d09de20f5fcc713f8487810e_NeikiAnalytics.exe
-
Size
3.6MB
-
MD5
5d5fa6892b93b512064465e16637b170
-
SHA1
3b32e762573a72b1c1dffcf17cd73da54c6dcf2e
-
SHA256
60a43c401300269ebed93b4e7820160830a9b800d09de20f5fcc713f8487810e
-
SHA512
01a25e30ac42a455ccbb69511e612529284a35ad3fc664a5d9fbcdaf22b28b2675a013fcd4310a68c6e5a553e356d69219f2e561eabf2a5e37f79759aec53f07
-
SSDEEP
98304:XZ9BKKx1e/nkejPAnIEfswzO8+QrS6pw6dy:jBKKx1e/nTz+I0sSw6d
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60a43c401300269ebed93b4e7820160830a9b800d09de20f5fcc713f8487810e_NeikiAnalytics.exe
Files
-
60a43c401300269ebed93b4e7820160830a9b800d09de20f5fcc713f8487810e_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ