rundll32
Static task
static1
Behavioral task
behavioral1
Sample
79d85910e404aef5e4f3e4f1d0207070_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
79d85910e404aef5e4f3e4f1d0207070_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
79d85910e404aef5e4f3e4f1d0207070_NeikiAnalytics
-
Size
6KB
-
MD5
79d85910e404aef5e4f3e4f1d0207070
-
SHA1
af6858113120d272ce65c45bf3501ee1e18d2130
-
SHA256
319b6b0aa26bf74f1193c9c0a72f3c44e4152cfda655ddd77667e2c4767c7509
-
SHA512
0074d1a145c40ec72952c02eb0514853d36ac8598687d0a1378b553420e041af674ff373d5bd40e81d076e3dfb7070cf5b120f5edae3078db7bdce55c52c4740
-
SSDEEP
96:DixZjmjtjd8jPjcZGR5TIWS8e3JJm8wYNnbg:unSR6bgYNS8eG8z9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79d85910e404aef5e4f3e4f1d0207070_NeikiAnalytics
Files
-
79d85910e404aef5e4f3e4f1d0207070_NeikiAnalytics.dll windows:5 windows x86 arch:x86
33eb74cdd77dab1b168bbaa130115a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
user32
PostMessageW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ