Behavioral task
behavioral1
Sample
82d1b043afac747f23fadff986251a80_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
82d1b043afac747f23fadff986251a80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
82d1b043afac747f23fadff986251a80_NeikiAnalytics
-
Size
813KB
-
MD5
82d1b043afac747f23fadff986251a80
-
SHA1
ab9992e1873cc2add67e2938db3b3bd5a7e34b8d
-
SHA256
6b82c1d5537b29aa5cc1a4f198956acc77f2c51a7cf9313bf4634f971d148510
-
SHA512
4ed2f98a3a90c3f6f6a4741208600c63ae2aa52d66fc04a5e766b53b1f4b698e102a4f47be10cd3fad1fae933e84333509594d478affab92e65fad44b5602e80
-
SSDEEP
24576:xn43yZy8OcfWckIqFGxHyyof5GKzVarS2RJ5LmYM:F43yZMD/Xf5GKzeRnO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82d1b043afac747f23fadff986251a80_NeikiAnalytics
Files
-
82d1b043afac747f23fadff986251a80_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB