Behavioral task
behavioral1
Sample
17044553c3592686e93d9c1536822780_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
17044553c3592686e93d9c1536822780_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
17044553c3592686e93d9c1536822780_NeikiAnalytics
-
Size
1.9MB
-
MD5
17044553c3592686e93d9c1536822780
-
SHA1
05be178fefde214e849dcc833b880ba392b365e7
-
SHA256
e4cc077bdf3d1074c8d8ed9347946179b03bb0853c34c33201123fbd3378ba25
-
SHA512
d755e8b6a2a1be230aad3fbf8e9b7dfad93eba5f5b50cc7ef60fb4af45243167b9bcb48bc23ef1123d86cfa7afe8c02d09b5ad4b76f05650d08c3403b90770eb
-
SSDEEP
49152:x5N6IinhRTAk1cSsty6q5Zj/osB+Ck8rcD:x57sv91Wty53LFICk8rcD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17044553c3592686e93d9c1536822780_NeikiAnalytics
Files
-
17044553c3592686e93d9c1536822780_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 512B - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB
.shik Size: 512B - Virtual size: 4KB
.nbd Size: 512B - Virtual size: 4KB