Behavioral task
behavioral1
Sample
42148e51a876d81ab1b862cc2debdcb0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
42148e51a876d81ab1b862cc2debdcb0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
42148e51a876d81ab1b862cc2debdcb0_NeikiAnalytics
-
Size
681KB
-
MD5
42148e51a876d81ab1b862cc2debdcb0
-
SHA1
0de5621b74f8b4d0f0d166a3f27abcb5ee896085
-
SHA256
5b8cefd4be8c0b34e401ac0c0d55ca81fc1ce1a795c9c2a1ff7e1fc119583464
-
SHA512
80040d24ae43710a8edc43526993803c147751c4f368b13267f6612ec37409e19648faf05f9f73f89f73ea1be230501b71f65d3a1c73d37aed068c36f98b95eb
-
SSDEEP
12288:tEQoS9qhgx/BOunVIgrAeigZO0DuVvzgGxfQVPBqKo5VTWJcfW9ZtqyjxSSsXWu6:t2gx/BhfrjAzgr50h7TvfunjXu6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42148e51a876d81ab1b862cc2debdcb0_NeikiAnalytics
Files
-
42148e51a876d81ab1b862cc2debdcb0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE