Behavioral task
behavioral1
Sample
ae13c6e4c6291411a47e1a7a1df5c3f0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ae13c6e4c6291411a47e1a7a1df5c3f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
ae13c6e4c6291411a47e1a7a1df5c3f0_NeikiAnalytics
-
Size
1.9MB
-
MD5
ae13c6e4c6291411a47e1a7a1df5c3f0
-
SHA1
e66b25ef8741e14329424a6f1fe66e3fe5507e45
-
SHA256
13dbfafae490a186da49f799c5834237267ed9ef5af87be58b0308c34e462cad
-
SHA512
02f5cf36e9fa4ac4f2c123dc51953e511cc55f8e152d13e61cfa6ebe5467ab30c73c3cb1d98947a83893f8b19a53760ebd4a054016bccb52f7ac4c4a237410ac
-
SSDEEP
49152:RNfucecm7LbaVGY7j3a01xahWYYljHcoAdjBfO:RNfucecm73aX7jq0/aMYujHcoCjBfO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae13c6e4c6291411a47e1a7a1df5c3f0_NeikiAnalytics
Files
-
ae13c6e4c6291411a47e1a7a1df5c3f0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ