Behavioral task
behavioral1
Sample
3afd013cd92c32bf88dccc10ee80fee0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3afd013cd92c32bf88dccc10ee80fee0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3afd013cd92c32bf88dccc10ee80fee0_NeikiAnalytics
-
Size
343KB
-
MD5
3afd013cd92c32bf88dccc10ee80fee0
-
SHA1
3a1bd4a2d8d8168a1c5bda8e2dbc761bebddb39a
-
SHA256
89e2c760a8175819c36c6e3ecb16ab626315973349e11bede6739de33902d0a9
-
SHA512
0e33441d2c4fde5aa592ecb21668aeaf2b513564d30b7d8c07146b48a81db79c492f4b3b7b2224b2eb3d9053ae344b44b0d8c2c988f8bbc4db5a329b30d998e9
-
SSDEEP
6144:bPDLCL4Io5R4nM/44Q/QXBZUdOdDjSJnywtQ+NpbyJrw/plvo+Qy6PWv0Mn0XByZ:bPKL8qwQ/YBZUsC9FNpbaepl2yNv0Py
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3afd013cd92c32bf88dccc10ee80fee0_NeikiAnalytics
Files
-
3afd013cd92c32bf88dccc10ee80fee0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB