Behavioral task
behavioral1
Sample
176c592c62f5101a451913f9be689c20_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
176c592c62f5101a451913f9be689c20_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
176c592c62f5101a451913f9be689c20_NeikiAnalytics
-
Size
1.6MB
-
MD5
176c592c62f5101a451913f9be689c20
-
SHA1
dc375f2c19c2e3b6c3f6194734d8d31664d66023
-
SHA256
8b5c44272c1d04183602b52e5f1c45162370727efe2c15b7b8db4cd85adcc5d1
-
SHA512
c120830a561ff457362915893b8f0bd4f8b5d6c918f4f3102699dc574845ccd589216279ecbfe44274ef0feb7ef3c37201c8075b48d8480b9d3262a9f767d2e9
-
SSDEEP
49152:Qo5Y+s+drydjm6XTlmhTOnS897LDKZqlGwx:Qes+dUaKTl+gSMCZ8Gwx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 176c592c62f5101a451913f9be689c20_NeikiAnalytics
Files
-
176c592c62f5101a451913f9be689c20_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE