Behavioral task
behavioral1
Sample
87c9f2e20e6cc96f1ccaaa02e669c400_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
87c9f2e20e6cc96f1ccaaa02e669c400_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
87c9f2e20e6cc96f1ccaaa02e669c400_NeikiAnalytics
-
Size
627KB
-
MD5
87c9f2e20e6cc96f1ccaaa02e669c400
-
SHA1
69e43f044634970e64c2641b8b5069487658d696
-
SHA256
948732cd70ac99f3953e50afa4ebde10810640ded2468d15445990d723118488
-
SHA512
7e4ed43f373af1a169398eee3e5e736f2d9e08acf9c978e16464894241667771f84b8b31056676b9b4f3121751aa38ed5092e1062377dc430330067d184cc681
-
SSDEEP
12288:xEQoS+qhDsb8sIxfyS2I0vX9KQ+ja2kh/dynPd0H0Z2NYMpyBB4:xnDsVIhyM01KbNLPdBmT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87c9f2e20e6cc96f1ccaaa02e669c400_NeikiAnalytics
Files
-
87c9f2e20e6cc96f1ccaaa02e669c400_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB