rundll32
Static task
static1
Behavioral task
behavioral1
Sample
016569803334c04095889bd4892b4910_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
016569803334c04095889bd4892b4910_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
016569803334c04095889bd4892b4910_NeikiAnalytics
-
Size
7KB
-
MD5
016569803334c04095889bd4892b4910
-
SHA1
b75062d36fe342fbc9e14530e627c7f6d1723be0
-
SHA256
1b9d4840df7c88cc161288bc5f0f8e54af0af1efe4079454d99ac7b3e88529ec
-
SHA512
c6317368a6e98a68243a0a84b3629f9ce36c6d00599b58e841f7c28ca26d633cb3bde640cbfd8e41b18684db623c6fbbb5b32ca356ad381552fdcef8b363b346
-
SSDEEP
192:unSR6bgY/RPS90Azlf/n+oWRr6wO8VfDX:uZ/RaqAzl3I+iBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 016569803334c04095889bd4892b4910_NeikiAnalytics
Files
-
016569803334c04095889bd4892b4910_NeikiAnalytics.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ