Behavioral task
behavioral1
Sample
bb07b85b6202b65fb32cbb8a06b026d0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bb07b85b6202b65fb32cbb8a06b026d0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
bb07b85b6202b65fb32cbb8a06b026d0_NeikiAnalytics
-
Size
1.4MB
-
MD5
bb07b85b6202b65fb32cbb8a06b026d0
-
SHA1
94d897198528344e4ecb0db7a98a49daaf4598e0
-
SHA256
dd05d1a55a03a8534f4c231a166837d249828bcdd4f19cf1cd0e41af2ce38e83
-
SHA512
5496cf4203c01a3e47172dfedc6a5eb012a276822d1de5b959c008b0f67de882b0c85d8820cb3d6447071848fbfb7bf72b2e1321dc96490ee887affcc56f3f11
-
SSDEEP
24576:t25Eoj6TJwV/u+CThq7QyyYa2+mcvlAZddH/682LyySqRZXRRC/U1ZNdEeWxv9xk:Q+oj6dwPC2Qyuy6lAZXf682LyVwl1D7D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb07b85b6202b65fb32cbb8a06b026d0_NeikiAnalytics
Files
-
bb07b85b6202b65fb32cbb8a06b026d0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE