Behavioral task
behavioral1
Sample
88fdff4d7a6c4de55ce45fe178119ea0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
88fdff4d7a6c4de55ce45fe178119ea0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
88fdff4d7a6c4de55ce45fe178119ea0_NeikiAnalytics
-
Size
1.0MB
-
MD5
88fdff4d7a6c4de55ce45fe178119ea0
-
SHA1
a79b989e52bcc5102c49e3c796f906930424504b
-
SHA256
410624a01e74202e0c62c4d9ceada005eb09dfa819b0c938b3ac513015a4c800
-
SHA512
87b28697643de0e24fc934c6e30e9551841d0bfee82294a0943fb7b51efc29d7b212702f9eedde229f1d222ac97368fbf483a89ec5edea0a80a7cb35242218d9
-
SSDEEP
24576:YikFrTWw3bcOXZpYIIcdMSni4TSUSS4HnU9WEWdt+1KoraX+bq:xivPBMQSU6HnU9WEy5mFq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88fdff4d7a6c4de55ce45fe178119ea0_NeikiAnalytics
Files
-
88fdff4d7a6c4de55ce45fe178119ea0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 512B - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB
.shik Size: 512B - Virtual size: 4KB
.nbd Size: 512B - Virtual size: 4KB