Behavioral task
behavioral1
Sample
9f1a2e0459528413a92913d8bdb0ad30_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9f1a2e0459528413a92913d8bdb0ad30_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
9f1a2e0459528413a92913d8bdb0ad30_NeikiAnalytics
-
Size
2.0MB
-
MD5
9f1a2e0459528413a92913d8bdb0ad30
-
SHA1
4269a57d659abe4003431318e025be412abb7fee
-
SHA256
fca34617baf259d97c0e1cecdb8757bba509e40f18a99088f7dbdc9517511ce5
-
SHA512
171a70cdfedcc4f77d226c9de81fd137c5e792d6b19db3a0ede931983a2f6a6751f46a4938021ad62d0ca4f084a5e54a157bef1b78244fe3e252ea60b34d78a8
-
SSDEEP
49152:/Scw14VNgPG3ijVkxQDf/amFy1H5veGu+ntF:5wCgUqVkxQbifj9u8F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f1a2e0459528413a92913d8bdb0ad30_NeikiAnalytics
Files
-
9f1a2e0459528413a92913d8bdb0ad30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ