Behavioral task
behavioral1
Sample
5cf56320dac9a9371ca610a4c9962510_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5cf56320dac9a9371ca610a4c9962510_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
5cf56320dac9a9371ca610a4c9962510_NeikiAnalytics
-
Size
1.2MB
-
MD5
5cf56320dac9a9371ca610a4c9962510
-
SHA1
abbd20e37e3dc000487a89564edc4f10c3ae034b
-
SHA256
c01e32b880af4700c2ae471f7e7bf8ab5085b72ff85b033d1e3005b4aa3e6546
-
SHA512
f3128b69b25320fbd5e45a26f9e176e5a18ed9e33062e38e0d5ddcad5ef69b03f30f425a78d028e8574c39e432a2dc0a27440d6220f63bd1236f7b81903c0e93
-
SSDEEP
24576:YowEuwINwvpW4I++DBucIU6zghMA7UvwY9qX6wp7rOhb:XRzIAg4GVKgXewY/+r4b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cf56320dac9a9371ca610a4c9962510_NeikiAnalytics
Files
-
5cf56320dac9a9371ca610a4c9962510_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB