?CreateEntity@@YAPAVEntity@@PAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
0712d449a414ade2a0ef022ba25b603b09dc9e55d427201d56512c55738f3065_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0712d449a414ade2a0ef022ba25b603b09dc9e55d427201d56512c55738f3065_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
0712d449a414ade2a0ef022ba25b603b09dc9e55d427201d56512c55738f3065_NeikiAnalytics.exe
-
Size
52KB
-
MD5
7c0fa4a47303fb4294ffcbd2bff298c0
-
SHA1
9ec59e2b275f1a5684b2db5f5c87166639e5bff5
-
SHA256
0712d449a414ade2a0ef022ba25b603b09dc9e55d427201d56512c55738f3065
-
SHA512
bb8be446214ebdaaa831bc8578a0f5c8b17927050522c1bfc664f3cbf02ec2d7dece2c11efdb438db1f2d4465cf57a0ff89473198e3bd9699563c80a7821390b
-
SSDEEP
768:tgIcBtSKOmDy/ffKnF1WIrCzMO7/ZDHhVTc9iB9MWjSTwoq+Akg:t4Km+fyne7VBVhBoB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0712d449a414ade2a0ef022ba25b603b09dc9e55d427201d56512c55738f3065_NeikiAnalytics.exe
Files
-
0712d449a414ade2a0ef022ba25b603b09dc9e55d427201d56512c55738f3065_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
073f004c39c81295edcae438caa7f788
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileA
SetFilePointer
ReadFile
CloseHandle
OutputDebugStringA
HeapReAlloc
GetStdHandle
GetFileType
RtlUnwind
LCMapStringW
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentDirectoryA
GetLastError
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
MultiByteToWideChar
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
user32
OffsetRect
gdi32
DeleteObject
SetMapMode
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ