Behavioral task
behavioral1
Sample
440dea8861d1ba38de50d3a94b3c3180_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
440dea8861d1ba38de50d3a94b3c3180_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
440dea8861d1ba38de50d3a94b3c3180_NeikiAnalytics
-
Size
1.4MB
-
MD5
440dea8861d1ba38de50d3a94b3c3180
-
SHA1
ce11cfe7ece6b0122fe7cc4e3675d4d582670cb3
-
SHA256
842825b9a7cb1affdf6feac5901524345b35fb47c847ba68ed2eb9196e50d364
-
SHA512
7e228178d0a076ff36a5e441e38e601a1cbe42156cdd932be30c0b38843d94769c7c1f2b57dbcc630314b59351d43b4277eda65613f54fd6ce56066c1440330b
-
SSDEEP
24576:0bp0F2NnMMLAqZdbF/0aTdXZrb93BUHXiWBwLD9o689BVpy2CWT:CiC3AqZdJ/0aTdXZrbfTWqD9oBBVpf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 440dea8861d1ba38de50d3a94b3c3180_NeikiAnalytics
Files
-
440dea8861d1ba38de50d3a94b3c3180_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ