rundll32
Static task
static1
Behavioral task
behavioral1
Sample
166d8dd43caf066430a98d637138b520_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
166d8dd43caf066430a98d637138b520_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
166d8dd43caf066430a98d637138b520_NeikiAnalytics.exe
-
Size
7KB
-
MD5
166d8dd43caf066430a98d637138b520
-
SHA1
86826cf722e94a94cd1cae408733a719b191f5ff
-
SHA256
b15d1ba891f137fa0957de4c717e121705884cb5911474d8e7f80f973f20fcc1
-
SHA512
2052ac55b7e9442c44cdbaa782bdc40d7d5fc4703a5858a55f327d111a4b84dbf09e95a40514c0d220c6e81a94ff96d07ec0a0cd21513c841602a886e5bdc1b5
-
SSDEEP
48:Ss0GrB23grztJrhWRmnVjG5a4Uh+cks50uHwS50Vu62qsiYDDDDDDDDuuOZS:z0/gPtJrYmVjGwd+8blPDDDDDDDDEZS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 166d8dd43caf066430a98d637138b520_NeikiAnalytics.exe
Files
-
166d8dd43caf066430a98d637138b520_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ