Behavioral task
behavioral1
Sample
05f21eba8f3fcb2c0c8145289b4819d0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05f21eba8f3fcb2c0c8145289b4819d0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
05f21eba8f3fcb2c0c8145289b4819d0_NeikiAnalytics
-
Size
1.1MB
-
MD5
05f21eba8f3fcb2c0c8145289b4819d0
-
SHA1
cec46a3d33ba357bfbcc0d8fe86a6f11d31cfef0
-
SHA256
6a7bb2f5a4c94d051772007982c143a2ee3ea70e64b59a4b6fcbd3dc96892dc2
-
SHA512
bd46966044fe1ff5cd8bf4d824f739d441862f21f159c8930c7dc2fb1efcf28ccb787253b8e2fded02a0697bf75c25dcb4ff6e5a4765809feb53320f8f813160
-
SSDEEP
24576:NSLYgV3/D9aTNek3u27AYQNSOQ3droctTLPhDV7cfvAb4UJklrBCeJ9m5:NXgVcjSNSOQ3droWLZRQ3AceCrBTJ9W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f21eba8f3fcb2c0c8145289b4819d0_NeikiAnalytics
Files
-
05f21eba8f3fcb2c0c8145289b4819d0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB