rundll32
Static task
static1
Behavioral task
behavioral1
Sample
3ebdc2748f019de34d0658b1004bffe0_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3ebdc2748f019de34d0658b1004bffe0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
3ebdc2748f019de34d0658b1004bffe0_NeikiAnalytics
-
Size
5KB
-
MD5
3ebdc2748f019de34d0658b1004bffe0
-
SHA1
a9b2e7342214d2c5a3d72ca8c792466bdee2adf7
-
SHA256
5eb9a8c9dddc6f7265a0ba7c6c9ea1b2fa0f96457378ee9524aa5a8dcf10626e
-
SHA512
75ba955dc5647ca64d3b01219948730b1242edd62587ed24c1eb6363d2d8340b8e5bce7b0f282af661ef63750f13b1d20be36de6cd0d81001e8bdfaa2869feee
-
SSDEEP
48:CCy86+Wet9Q/iooHeiefhe+/lSMYEqiiOkQ+EgBWys9209U:hy859x0P8MarOkPEgo19Bu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ebdc2748f019de34d0658b1004bffe0_NeikiAnalytics
Files
-
3ebdc2748f019de34d0658b1004bffe0_NeikiAnalytics.dll windows:5 windows x86 arch:x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ