KbdLayerDescriptor
Static task
static1
Behavioral task
behavioral1
Sample
9489618f597d40e0bb073e34800d35b5ac9c0bcf59a3faec8068bb30c12396ee_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
9489618f597d40e0bb073e34800d35b5ac9c0bcf59a3faec8068bb30c12396ee_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
9489618f597d40e0bb073e34800d35b5ac9c0bcf59a3faec8068bb30c12396ee_NeikiAnalytics.exe
-
Size
36KB
-
MD5
80fd12ced9dcf5fcd6ba1d5f7da91740
-
SHA1
27b06193f42985d0ff1f157a08a9fabd77331c44
-
SHA256
9489618f597d40e0bb073e34800d35b5ac9c0bcf59a3faec8068bb30c12396ee
-
SHA512
729cc03d679bb59dca223763f4962b2c53dccb8094081533bcc12cffbf21d6963ea92c561fe4bd48eca41d681fd7a130e999617cc3198f33a9110c33ad363a0b
-
SSDEEP
96:a0xHo9twjlz/ujDZs8VWDVTiVm9JuHthAkXRa0r1Ll72r0CNrzSPyxNtvbqIYcGO:HxLO68VWDVqmLNkXRVr1L9LCNrIINGO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9489618f597d40e0bb073e34800d35b5ac9c0bcf59a3faec8068bb30c12396ee_NeikiAnalytics.exe
Files
-
9489618f597d40e0bb073e34800d35b5ac9c0bcf59a3faec8068bb30c12396ee_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 32B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 4KB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ