Behavioral task
behavioral1
Sample
2b12d678cb6eb2363972f2ffe2808cf0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b12d678cb6eb2363972f2ffe2808cf0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
2b12d678cb6eb2363972f2ffe2808cf0_NeikiAnalytics
-
Size
1.5MB
-
MD5
2b12d678cb6eb2363972f2ffe2808cf0
-
SHA1
6cf1339577b58fc1a7590ef49f31f2a768095595
-
SHA256
5d63c2b4046cc1721af39b24433142d0d9e9a400eb4bb94eeb6504c24f3d7b3e
-
SHA512
240fb5f59d65b5a68c3c35d47878b0772145b75afadebc87002de39ef47d3745b6a2e04556bd9367912b98915713aab31bef6cd88e6af9ed6a05a8308521ae2a
-
SSDEEP
24576:sSLjttexu3rXZJMAN5xdOrk7U6jfVliLK8aaTzNJ6Cm0e4GFbLmm+P:sWte8zlNXffjr8akhJylXpE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b12d678cb6eb2363972f2ffe2808cf0_NeikiAnalytics
Files
-
2b12d678cb6eb2363972f2ffe2808cf0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB