Rand
Static task
static1
Behavioral task
behavioral1
Sample
8106efc3a15e73f590f29cc1b3918e3ac6458c01046629cb89119dfe1c464457_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8106efc3a15e73f590f29cc1b3918e3ac6458c01046629cb89119dfe1c464457_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
8106efc3a15e73f590f29cc1b3918e3ac6458c01046629cb89119dfe1c464457_NeikiAnalytics.exe
-
Size
100KB
-
MD5
d2206dedb82d25ebcce012c1dc1a2780
-
SHA1
3df893018fdbcda7cd19adbc99f5870893f22b5e
-
SHA256
8106efc3a15e73f590f29cc1b3918e3ac6458c01046629cb89119dfe1c464457
-
SHA512
6bf9b6a9873b232ea9f10f44c010b4c45efcf8dcc2728d7e47ee6e618c12d66cd7916c020571184aebd8d1cefcdfdcd6b8092212532a0fd943ef21bdd2f43fe0
-
SSDEEP
96:qVd/l3VUep+oGxL8blHgRA+NfGT0L0V59J7zZ65BHa/iJStu+BQ5p/4IBQ5p/46o:Qpp+uvnOYlzZ6ba/iYXXeX/L7xgno
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8106efc3a15e73f590f29cc1b3918e3ac6458c01046629cb89119dfe1c464457_NeikiAnalytics.exe
Files
-
8106efc3a15e73f590f29cc1b3918e3ac6458c01046629cb89119dfe1c464457_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
f24ac1d304b7d2292cd0de8231527a7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42d
ord3702
ord1860
ord4415
ord3231
ord1033
ord4130
ord1789
ord2661
ord4227
ord4229
ord2104
ord3366
ord3826
ord4239
ord4215
ord4408
ord3244
ord2340
ord2481
ord5077
ord1880
ord2473
ord2585
ord2341
ord2432
ord2339
ord3143
ord3144
ord3142
ord2431
ord3367
ord3784
ord3657
ord2021
ord1285
ord4492
ord2986
ord528
ord3552
ord706
ord2584
ord3691
ord728
ord1192
ord550
ord1050
ord1110
ord1189
ord1191
ord1087
ord1114
ord1041
ord719
ord333
ord1157
ord1101
ord1179
ord285
ord726
ord551
ord1186
ord1129
ord284
ord1166
ord1164
msvcrtd
srand
time
_chkesp
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_adjust_fdiv
_malloc_dbg
_initterm
_free_dbg
_onexit
__dllonexit
__CxxFrameHandler
rand
kernel32
LocalAlloc
LocalFree
Exports
Exports
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 845B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ