Behavioral task
behavioral1
Sample
1a530d55c214d17bf0056378872421a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1a530d55c214d17bf0056378872421a0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
1a530d55c214d17bf0056378872421a0_NeikiAnalytics
-
Size
1.8MB
-
MD5
1a530d55c214d17bf0056378872421a0
-
SHA1
ad72735060005ce5aae650ca087ef03e4eb611cc
-
SHA256
26209e0dc7c4dc47bdc91b4939726bf27c075ae5e52b6a98387a397b0b06de1a
-
SHA512
638888e1430883966a14c3268a7f76c560e0fca49eb7d697cf798d841d943a363449cb7758e40b2a99311b14420e92b5278fb6b8e8a229e88ca67dd38d178c81
-
SSDEEP
49152:5l5PekoRldfOrst/KXQrKkfdFQYflVZXyGdfNoPVO:5L1o9cYK4f4eXtFNoPVO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a530d55c214d17bf0056378872421a0_NeikiAnalytics
Files
-
1a530d55c214d17bf0056378872421a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB