Behavioral task
behavioral1
Sample
65dde20c5cf568264d47a92607569920_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
65dde20c5cf568264d47a92607569920_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
65dde20c5cf568264d47a92607569920_NeikiAnalytics
-
Size
1.2MB
-
MD5
65dde20c5cf568264d47a92607569920
-
SHA1
b0f8ffc78b021b9ff88a419f678cf91626584a88
-
SHA256
f1323d248a25bd447a767a0f401f616b48df3514b55b25e92181e5c4f2405570
-
SHA512
44331ec125e9447314b6443249ae4a6a396ad83857f09d6560ba863ac2a6913b64a31b608c2303485a7950b1ab611bb057fd6b666411ed9ae87a583af1c2c9ac
-
SSDEEP
24576:YoyUYqa14nf0J7nQE68nYdeLO9AmzQUo622BExsJc7fGKLMxR:XvYKA68nYs6z722BXc7SP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65dde20c5cf568264d47a92607569920_NeikiAnalytics
Files
-
65dde20c5cf568264d47a92607569920_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB