Behavioral task
behavioral1
Sample
7e08b256c9fc2c00b74ee487e23d76f0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7e08b256c9fc2c00b74ee487e23d76f0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
7e08b256c9fc2c00b74ee487e23d76f0_NeikiAnalytics
-
Size
1.3MB
-
MD5
7e08b256c9fc2c00b74ee487e23d76f0
-
SHA1
a43d05d8ced3721b40d01f01f5f2e2bd53e78f04
-
SHA256
a588a043ffba52200f39f1f3ce8171c71cb6453a14d396b33607d18b1606e47f
-
SHA512
ca24a23cd5b58af2a01ad9e5926c17c06a10fa246dbad2f4e567979d51a2b6d3b9381a3ddbc3e1047c1c7a37a906fb3acb22385da341adf96b2fa979fb04e3f4
-
SSDEEP
24576:xnmCd8m3Q23+6Qup0ZO30dcADL5liS4hIFzRsVqoHCxkdaNhEShlX:Fm8Wup/3VADL5RyqkaNqOX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e08b256c9fc2c00b74ee487e23d76f0_NeikiAnalytics
Files
-
7e08b256c9fc2c00b74ee487e23d76f0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB