Behavioral task
behavioral1
Sample
1a2c73c17c1ef90e8fad5024589b56b0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a2c73c17c1ef90e8fad5024589b56b0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1a2c73c17c1ef90e8fad5024589b56b0_NeikiAnalytics
-
Size
671KB
-
MD5
1a2c73c17c1ef90e8fad5024589b56b0
-
SHA1
ce51ddb7c748a231976ed823d28a2a688fe98c46
-
SHA256
085c70d2648280e2cdbbfa1ee842b5127fc2cbb35e2f47ad94503dd4b31c47fb
-
SHA512
6df2cb41a0c1a00829864597dabcbabd8723fe6353b911620f5c722fc4eecdbf2b26a784ea3a2e8e7b63ceb0c689ae00395ee68d204a6839a14291cac49943f5
-
SSDEEP
12288:JEyDMhqhWe1cf0JBIToiJB9aSNwnXoT1c0Qmw0AVaBALuVErxVfklm:JBHWEBn6HwYBQmX2iVA1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a2c73c17c1ef90e8fad5024589b56b0_NeikiAnalytics
Files
-
1a2c73c17c1ef90e8fad5024589b56b0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE