Behavioral task
behavioral1
Sample
457e02f60ad2eaaee786a8d97dce0810_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
457e02f60ad2eaaee786a8d97dce0810_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
457e02f60ad2eaaee786a8d97dce0810_NeikiAnalytics
-
Size
1.7MB
-
MD5
457e02f60ad2eaaee786a8d97dce0810
-
SHA1
99043226284c1292de0462011684317ce1381ee3
-
SHA256
ce42c9d85eb25b9f008b576d5e3dc3f400b8dd967295dae2911f8ec506f2179f
-
SHA512
9c856b0f93c511077b9012a5108a090a6e18cdbb4325c4b0763a10c0c5b2c4c8f7843627243ccb7bdfa7960305db8bc16917e182ebc74f2a33d56cc4e43c972c
-
SSDEEP
49152:q8Sqd2usSCfQMWmIEv5669jg0FRZWIxWqmt2d:NSqwuQvW2E6980FiKTmtU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 457e02f60ad2eaaee786a8d97dce0810_NeikiAnalytics
Files
-
457e02f60ad2eaaee786a8d97dce0810_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ