Behavioral task
behavioral1
Sample
cbbe89392e41fd666b33f70655d25910_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cbbe89392e41fd666b33f70655d25910_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
cbbe89392e41fd666b33f70655d25910_NeikiAnalytics
-
Size
607KB
-
MD5
cbbe89392e41fd666b33f70655d25910
-
SHA1
6a11dde2173e6beda3ea0af72f63f73ea0fa4e08
-
SHA256
ba6c0811ff3aee914dd25ee0d920eea1142af968f3d8a64e2d778d9177bea941
-
SHA512
e1deaa9d7fd31425445590c5a68b6eaf3c3375c86c14d4fb1b0672000c4799155417bce6227100a1b3f264e25457c27d0388828312bab913bdfc8f3c9daae94d
-
SSDEEP
12288:CEQoSsEurN16FdhqZRO6453Jesjk21AGcHPrxVMgi8sW9nMuc/+5:CYrP6FdMTOV5Zj31WHTzV19nM1+5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbbe89392e41fd666b33f70655d25910_NeikiAnalytics
Files
-
cbbe89392e41fd666b33f70655d25910_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE