Behavioral task
behavioral1
Sample
7edc1e06d570033e645b33d11fd08bc0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7edc1e06d570033e645b33d11fd08bc0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
7edc1e06d570033e645b33d11fd08bc0_NeikiAnalytics
-
Size
903KB
-
MD5
7edc1e06d570033e645b33d11fd08bc0
-
SHA1
3605ed7bd27643924dc3d4fa25f67ff710a9940a
-
SHA256
97673efa0be711c7518fca0e1cb784b4bb039a0a44d94d1d4c52600e8cbf675b
-
SHA512
990d30ef642a4f32f092fc6249f5a6f64fc588d445c9e4148ecf149b7e0725f2aa4eef936dfe4a8086c95cbf68e2bb54fb3afb6270997822ce13df0a1246cf4e
-
SSDEEP
24576:YiIzWeQXA9waO1iloLjmfn05ZN2RT/3WBpq2nanl5TM1up/:xICQCZLjX/N2RTWpqDle1ud
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7edc1e06d570033e645b33d11fd08bc0_NeikiAnalytics
Files
-
7edc1e06d570033e645b33d11fd08bc0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 512B - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB
.shik Size: 512B - Virtual size: 4KB
.nbd Size: 512B - Virtual size: 4KB