Behavioral task
behavioral1
Sample
6e62e836c2397078a6fdde9a18d7f3b0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
6e62e836c2397078a6fdde9a18d7f3b0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
6e62e836c2397078a6fdde9a18d7f3b0_NeikiAnalytics
-
Size
222KB
-
MD5
6e62e836c2397078a6fdde9a18d7f3b0
-
SHA1
9ccd87e8ab3b8746382a2d2cc0835c86d0684267
-
SHA256
b1ed2701cc6d08ad9f1c3bca3baeb573f5b3b1d4a1d9e2ad0b8857b107582565
-
SHA512
ef093e9436ead2d9f691480ccb8491a99c2ff67b74c21b1a44a745382ffd6cfc760c40c7db1fcc7871aad5f5c20529df29904cb4314738b124c501aa8171f8a7
-
SSDEEP
3072:adEUfKj8BYbDiC1ZTK7sxtLUIGsqDiC1ZBdEUfKjj9dEUfKj8BYbDiC1ZTK7sxt1:aUSiZTK40QuZBUX9USiZTK40+HMHC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e62e836c2397078a6fdde9a18d7f3b0_NeikiAnalytics
Files
-
6e62e836c2397078a6fdde9a18d7f3b0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfiFkMYW Size: 5KB - Virtual size: 4KB
DLVCtdQO Size: 8KB - Virtual size: 8KB
kdGWsyWV Size: 18KB - Virtual size: 18KB
WeeVXneS Size: 1KB - Virtual size: 1KB
JogUNhZg Size: 512B - Virtual size: 477B
vTPCYsVb Size: 512B - Virtual size: 348B
VaCesUoP Size: 66KB - Virtual size: 66KB
LGZJoShp Size: 5KB - Virtual size: 5KB
yisrKLFh Size: 8KB - Virtual size: 7KB
ACAxfBEo Size: 1KB - Virtual size: 1KB