Static task
static1
Behavioral task
behavioral1
Sample
88c7b73bf3b5f5a0e22004e242f05cce7811c6c288acc7064f168f289df9e746_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
88c7b73bf3b5f5a0e22004e242f05cce7811c6c288acc7064f168f289df9e746_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
88c7b73bf3b5f5a0e22004e242f05cce7811c6c288acc7064f168f289df9e746_NeikiAnalytics.exe
-
Size
12KB
-
MD5
e649d5a8ab21a09e7f3d3357cfc8b490
-
SHA1
c59da1925e9a65ae72061a4bc22eed1101bdb046
-
SHA256
88c7b73bf3b5f5a0e22004e242f05cce7811c6c288acc7064f168f289df9e746
-
SHA512
8f654afc32db0266033146acdb7c48c548359234a7c10ba587295651926ead97d67be8a145fc54d686bb90ed272f07140acc3314e2e381b5c4df5824fe1bbefb
-
SSDEEP
48:SJmZi49emG12hmIJhHBl6u8oYPW0VHYJHtin9bmC0nAm0vtvNpnZ:gmd9emGkJh2fPvSQ9bmrnh6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88c7b73bf3b5f5a0e22004e242f05cce7811c6c288acc7064f168f289df9e746_NeikiAnalytics.exe
Files
-
88c7b73bf3b5f5a0e22004e242f05cce7811c6c288acc7064f168f289df9e746_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
89fab9291f56e5188f3b60ea48aa2b1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
SetEvent
DeleteFileA
OpenEventA
ReadFile
CreateFileA
GetProcAddress
LoadLibraryA
WaitForSingleObject
ResetEvent
CreateEventA
user32
SetWindowsHookExA
PostThreadMessageA
UnhookWindowsHookEx
CallNextHookEx
msvcrt
strcpy
??2@YAPAXI@Z
free
_EH_prolog
__CxxFrameHandler
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ