Behavioral task
behavioral1
Sample
402c70ff12bfc6d0879f81ea3fc2af30_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
402c70ff12bfc6d0879f81ea3fc2af30_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
402c70ff12bfc6d0879f81ea3fc2af30_NeikiAnalytics
-
Size
1.2MB
-
MD5
402c70ff12bfc6d0879f81ea3fc2af30
-
SHA1
0064f1bd82d102badf5e351541c9ea8c61f9ce36
-
SHA256
b2d921d68043759aa9e499304286c50a3506d0d8a12a5e04aa854fd8fb0d7d7d
-
SHA512
ec5b8af1a4bc9f0cb396ab7714d2c848f4ddf65c7ed0b0f69807febd6fab2db1deac77006fa1e234350d412badeb8f45497d2e3a7faeecd0aa802081f0c04d2c
-
SSDEEP
24576:NSLLkXd5SQ5WDhQqNMzUhC1ig5DcM4vbueQx1lmCD+f:NpbS5hQqWUhsVCvCeo1tD6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 402c70ff12bfc6d0879f81ea3fc2af30_NeikiAnalytics
Files
-
402c70ff12bfc6d0879f81ea3fc2af30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB