Behavioral task
behavioral1
Sample
92d01b5a6780871e9d30ca10b7a32ac0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
92d01b5a6780871e9d30ca10b7a32ac0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
92d01b5a6780871e9d30ca10b7a32ac0_NeikiAnalytics
-
Size
1.1MB
-
MD5
92d01b5a6780871e9d30ca10b7a32ac0
-
SHA1
b044ee9d2c056b5a4b768d561a8581a1474b0a34
-
SHA256
6680702a35c4b5dd00ac4c66a1c9b9e2802c9dd7552528daeee872ed318d44ba
-
SHA512
54641c878986cb8c111b75ee0a9da15e9b9bc88a36d8db80f4c05363b4c0b8b0dcbad3be49aebd185e1a77ef7acf4cb3f08d72c7c617100520b73224c6bb8e32
-
SSDEEP
24576:VdlxyyWn+/BzMzyV0piy+44rUGKlU6/Xptcd/PDGDFpAfMQ/kDNm:pxSzEyVcKTBts/ri0kg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92d01b5a6780871e9d30ca10b7a32ac0_NeikiAnalytics
Files
-
92d01b5a6780871e9d30ca10b7a32ac0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB