Overview

overview

8

Static

static

7

697312078f...cs.dll

windows7-x64

8

697312078f...cs.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    697312078fdb9d08132cb870315f1a20_NeikiAnalytics
  • Size 6.8MB
  • Sample240510-etvgsaad5s
  • SHA256 d0e4bf4fb20936632dadf5abeb042bb14a2529609ddd9760198d662dc24c4061
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 697312078fdb9d08132cb870315f1a20_NeikiAnalytics
    .dll 6.8MB

697312078fdb9d08132cb870315f1a20_NeikiAnalytics

  • IMPHASH eb2ecff3e5ed7ae134a82597b65c2bb0
  • SHA256 d0e4bf4fb20936632dadf5abeb042bb14a2529609ddd9760198d662dc24c4061
  • MD5 SHA1 SHA512 SSDEEP
windows:6windowsx86arch:x86

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
10995887
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths