rundll32
Static task
static1
Behavioral task
behavioral1
Sample
296612282374151076071569c837cb00_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
296612282374151076071569c837cb00_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
296612282374151076071569c837cb00_NeikiAnalytics
-
Size
7KB
-
MD5
296612282374151076071569c837cb00
-
SHA1
2f2e25c56a5abad00ea6310a6849e7a845227554
-
SHA256
66e300c8497004820325f7ca9c247009f3faafa038649a15155c79bb1cb28e69
-
SHA512
5fa7c4d18f8df5515b00083f6148b2e8203456821fbc04707755360262d15df31b9061952bca9703b0410bb3ccc6f43db5735bff272d06b20da68a808804d17d
-
SSDEEP
96:z0QR9B6BvAwbtzXX81zJn0pm38zDCojws8lyGXTH8wbwj21:JR94/btzXMDnCmM1jw1Hl0jY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 296612282374151076071569c837cb00_NeikiAnalytics
Files
-
296612282374151076071569c837cb00_NeikiAnalytics.dll windows:5 windows x86 arch:x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 359B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ