Behavioral task
behavioral1
Sample
5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics
-
Size
1.8MB
-
MD5
5717935af78dce4970c93b5f33bbc8a0
-
SHA1
330c14147f0f6b88b3ec91b70a9c5a047930d67d
-
SHA256
02ddaa2fa9c09b2e20e7455f54196d1bf1a4d68c8311a69750aea02a13c5d8b7
-
SHA512
da5e0941ef0ff2d5c66c402b611009a0225aad0fc5c1745cc555e4b587117a89f9767515de0ede1ac2d2d17c01e44767bf67487c1265d3ebf26e43585c72ec83
-
SSDEEP
49152:P2k5+aL43rSG2WS5IWY2R+EhlfUTF1yBF7HVdiLhqIuYLv:P/Mo43L2WNg+EaFoBZVwrFv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics
Files
-
5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE