Behavioral task
behavioral1
Sample
624490808aae6ca9a3f627136a6e8500_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
624490808aae6ca9a3f627136a6e8500_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
624490808aae6ca9a3f627136a6e8500_NeikiAnalytics
-
Size
1.2MB
-
MD5
624490808aae6ca9a3f627136a6e8500
-
SHA1
4c06cb1ae55f6b428e083b25e68f3c754da3999d
-
SHA256
34eb5745874c0ca9b74c9734bbe4764575950709f4f4304b94a4a50b8f39986d
-
SHA512
fef7fd54481fa1a86878b234e5aebecd8177cce84a9ea46a92dd9311157b6e704536d7b077ea35c9be1a664d2914866835601bfa2bb40eaad59bb4189ddd1d73
-
SSDEEP
24576:CPwq/rHryA8o+ZgqVYA3bUbjohObVCxpFDvOksVTQxd19N4a5cRXtm:xq/Hyx5jVYAr8owRCflGh9ENbca
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 624490808aae6ca9a3f627136a6e8500_NeikiAnalytics
Files
-
624490808aae6ca9a3f627136a6e8500_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE