Behavioral task
behavioral1
Sample
1305ea4217b63c9f52eaf710374f1f00_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1305ea4217b63c9f52eaf710374f1f00_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
1305ea4217b63c9f52eaf710374f1f00_NeikiAnalytics
-
Size
481KB
-
MD5
1305ea4217b63c9f52eaf710374f1f00
-
SHA1
daf4219fa8d3c2610a7d9b90d4eb43c645c7c7f8
-
SHA256
0900f69a47f62c3441c071a732d2917e210991e91562a2bfdf1d0bd02e8d9518
-
SHA512
eee5339b8b02d9e6e9cba2185c787c70bf557436ca0ba515fbb10079946c39ae78b0e1b12f5d9249693f6be2c5ba18eca1c5f6838a7cf71d3454911b72a354e4
-
SSDEEP
12288:JEyDMhqh6JmJqqdiQJh+m3IpbVtXCbYd26FGHThEGZ:JBIEqqdh9UmS26FuL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1305ea4217b63c9f52eaf710374f1f00_NeikiAnalytics
Files
-
1305ea4217b63c9f52eaf710374f1f00_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE