luaopen_gzip
Static task
static1
Behavioral task
behavioral1
Sample
4318e2eb5c06a20bff044533a02841ec4e7dda4806751f05d7e7d188cbaed29c_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4318e2eb5c06a20bff044533a02841ec4e7dda4806751f05d7e7d188cbaed29c_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
4318e2eb5c06a20bff044533a02841ec4e7dda4806751f05d7e7d188cbaed29c_NeikiAnalytics.exe
-
Size
24KB
-
MD5
7a9224e2cef25a502bb331eadca5aa50
-
SHA1
d4096548dbdf260c3b263c4ea355ee4839b47903
-
SHA256
4318e2eb5c06a20bff044533a02841ec4e7dda4806751f05d7e7d188cbaed29c
-
SHA512
e66c1cc0c3a97e09c921f6e1071eafe329445025ac7a2c4d87b5cc99be059a7977309b038f163d75cd915f7881ce36b1f7b11bd20d8a6b9f80f1aed605a933ff
-
SSDEEP
384:Atsx2wYBGiEjOfsEQ3m3mVSQsfPrYrPwqSH+VxQ7610472v:6azjOfTWHVSQe2+t7i0cG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4318e2eb5c06a20bff044533a02841ec4e7dda4806751f05d7e7d188cbaed29c_NeikiAnalytics.exe
Files
-
4318e2eb5c06a20bff044533a02841ec4e7dda4806751f05d7e7d188cbaed29c_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
84782d16476e3c955c6904dabd13ad87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
TlsGetValue
VirtualProtect
VirtualQuery
libmingwex-4
__mingw_free
msvcrt
__dllonexit
_errno
_iob
abort
calloc
fflush
fwrite
malloc
sprintf
strerror
strlen
vfprintf
zlib1
deflate
deflateEnd
deflateInit_
gzclose
gzeof
gzflush
gzgets
gzopen
gzprintf
gzread
gzseek
gzwrite
inflate
inflateEnd
inflateInit_
agena
agnL_optboolean
agnL_optinteger
agn_checklstring
agn_malloc
agn_poptoptwo
agn_rawsetfield
agn_tostring
luaL_argerror
luaL_buffinit
luaL_checklstring
luaL_checkoption
luaL_checkstack
luaL_checkudata
luaL_error
luaL_newmetatable
luaL_optinteger
luaL_optlstring
luaL_prepbuffer
luaL_pushresult
luaL_register
lua_createtable
lua_getfield
lua_gettop
lua_newuserdata
lua_objlen
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushvalue
lua_rawget
lua_rawset
lua_rawseti
lua_replace
lua_setfield
lua_setmetatable
lua_settable
lua_settop
lua_toboolean
lua_tolstring
lua_tonumber
lua_touserdata
lua_type
lua_typename
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 100B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ