Behavioral task
behavioral1
Sample
13d96271ec8af3395d8c77c16ad42450_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
13d96271ec8af3395d8c77c16ad42450_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
13d96271ec8af3395d8c77c16ad42450_NeikiAnalytics
-
Size
909KB
-
MD5
13d96271ec8af3395d8c77c16ad42450
-
SHA1
34d2f606012ee2ba8bc37e2202a6f7b32a1122a1
-
SHA256
9b2925a5a9c8125540b1627c810c5abcab5c60229bbbd613a5d46d2165d0aaae
-
SHA512
25ddcf7c83d86e815657f44cdb1961cfd8bb149e8f200a191a191da9548a0d1958059cff1d13ef8780d53aca1385c1b26e318046f33aae5545fc5714b849f75b
-
SSDEEP
12288:0EQoSCmsZbs+EL0luaHw2/ktGqZ4GKsNn00m3wUNOq56suBMMr9+yPaTbix9Wyu0:0UJGw7w2QGqW/sNn5BYVJu940aO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13d96271ec8af3395d8c77c16ad42450_NeikiAnalytics
Files
-
13d96271ec8af3395d8c77c16ad42450_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ