Behavioral task
behavioral1
Sample
29968c7b017d738ca2f678d373c1c380_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29968c7b017d738ca2f678d373c1c380_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
29968c7b017d738ca2f678d373c1c380_NeikiAnalytics
-
Size
1.3MB
-
MD5
29968c7b017d738ca2f678d373c1c380
-
SHA1
156d3c5b3b72d02060a5e79327e63720431eab4e
-
SHA256
6eb669e0ffca948d9fdeebd732b125183b23de2a7c2739fe71e5c9b73b287a46
-
SHA512
649648fde62688c9611316a644c98e05b343e553df834d41dcb6c170457621760fd3992ad82b11c5e2e666061e36aa9b73c32bfb51aa24859ee8f10dfd8dfdce
-
SSDEEP
24576:sSLFSuC6ZK3p1P15jyV4y3oHJj1nP7AlpHkFT/hn2oZ1GHyyJ1fi0Dsa/wObt:slF6ZMN1wEJJnP0HkD2oZ130BxHt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29968c7b017d738ca2f678d373c1c380_NeikiAnalytics
Files
-
29968c7b017d738ca2f678d373c1c380_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB