Behavioral task
behavioral1
Sample
c06d89c17b0f451126a048d46d1aa980_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c06d89c17b0f451126a048d46d1aa980_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
c06d89c17b0f451126a048d46d1aa980_NeikiAnalytics
-
Size
1.5MB
-
MD5
c06d89c17b0f451126a048d46d1aa980
-
SHA1
6dabe98d1c1fffd63db8f9a9d31782fd6191eb28
-
SHA256
5e61a06aeefd66eb75151e92778565905558fcc9631395d046d76c9f1fe47132
-
SHA512
209b826d5ef4df485932c9c1eb669ee7b3e838a0b9a149d4439f10efa6ab618f241d4cf32f0b7b7d163aff7ad276e199c81f670959e3ceead6a97566ac15d42d
-
SSDEEP
24576:Zp6dbc1t5J76z+++MSJSajMEAzyemyXyAX1OQrE+5N80:GVut5JGq+O4EAz1mtAlOYEJ0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c06d89c17b0f451126a048d46d1aa980_NeikiAnalytics
Files
-
c06d89c17b0f451126a048d46d1aa980_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ