rundll32
Static task
static1
Behavioral task
behavioral1
Sample
a156dc77b9a9ae6f58aa88a8bccec400_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a156dc77b9a9ae6f58aa88a8bccec400_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
a156dc77b9a9ae6f58aa88a8bccec400_NeikiAnalytics
-
Size
5KB
-
MD5
a156dc77b9a9ae6f58aa88a8bccec400
-
SHA1
0eeab4ed35df86024a9722efa4b7b0d930b5815c
-
SHA256
d06cd7abe57621986d0b11243650b6847cc2f7b8d22f1c153df172c0eed2c61b
-
SHA512
0baae7c492aa5ea25e8884c69d9f5959a39926024b84aae4de097b6b88b2516b47ed2779d232aa52beb6defbea641d54f48931c7497c16ab5fa78f67f4eb50b3
-
SSDEEP
48:Ss0vOiamaF9wJqkECrhWR00scqn6dTxHO5FB8+MaMc++cTIAT:z0I9wZLrY0/yHOO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a156dc77b9a9ae6f58aa88a8bccec400_NeikiAnalytics
Files
-
a156dc77b9a9ae6f58aa88a8bccec400_NeikiAnalytics.dll windows:5 windows x86 arch:x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 954B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 369B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ