Behavioral task
behavioral1
Sample
64acd2dfd3ba014592462e402f75c170_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64acd2dfd3ba014592462e402f75c170_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
64acd2dfd3ba014592462e402f75c170_NeikiAnalytics
-
Size
990KB
-
MD5
64acd2dfd3ba014592462e402f75c170
-
SHA1
45c44049e92ac51b1a8b32b53fb333a6fe95270a
-
SHA256
630594028226bc8e2b2dd94ba4e46bcdb551289c24dc3495ff2055cbac567f7b
-
SHA512
d8ee2995ffb04ae0c5851ff150a307ffe5e995bcd7186f1502c43a5a502b4ed68418599cf35315492c2a1f842828edcfbf788785ef22574fc764c7a917e9b4fe
-
SSDEEP
24576:YiyHKToVWAv+xrKjgMjVBcqhLwdPT7Z6qe5BCVB:xyHKmWn2XZd+CCB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64acd2dfd3ba014592462e402f75c170_NeikiAnalytics
Files
-
64acd2dfd3ba014592462e402f75c170_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 512B - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB
.shik Size: 512B - Virtual size: 4KB
.nbd Size: 512B - Virtual size: 4KB