Behavioral task
behavioral1
Sample
81e8c26419285df1dc19979c56ecd790_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
81e8c26419285df1dc19979c56ecd790_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
81e8c26419285df1dc19979c56ecd790_NeikiAnalytics
-
Size
1.3MB
-
MD5
81e8c26419285df1dc19979c56ecd790
-
SHA1
491eb770e583ab6f8f380539e3709972898d22bb
-
SHA256
66b029b1f7b96a0496abfa0b5edc48974411ac65689fae419cc4f172ae5e1e25
-
SHA512
7e6104d4904d1e67cf57fa27d06d9eca70a7438f75ebb4b2fae60539857419afe3da869343c2cca0ffc627815d63837c7a559d75cbd76239c2015c0ecb259ad5
-
SSDEEP
24576:Z9dWfreqxg0wrTydXg7E+95sz692qKt77rbthKNWrfQNhevhCux46J5VRrB:XmPxg0wrWGJsU293biWYChCv63t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81e8c26419285df1dc19979c56ecd790_NeikiAnalytics
Files
-
81e8c26419285df1dc19979c56ecd790_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ