Behavioral task
behavioral1
Sample
9cc464895225638443227750e639b6e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9cc464895225638443227750e639b6e0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
9cc464895225638443227750e639b6e0_NeikiAnalytics
-
Size
1.7MB
-
MD5
9cc464895225638443227750e639b6e0
-
SHA1
c96b02f2db9d6d0d9bfd4454738f0a19fdd1262f
-
SHA256
048a9a7ac19cb7b0c849deb75b13d6d552cce9d8a5d49df877cbf742cbf0fac3
-
SHA512
b0ee38fc1719f37c2e2504a1c13532e4750caec6dcc4c044fc29d743d36eb24ff7f01dc75b2d3212bb9d3a76931af6024a4cff74b8dfee04db5aa369aa08ac9f
-
SSDEEP
24576:YiZiiqLv6V9u6wnxEp8cirPlKHdlFIzcorfCagn1btDTk0312jgHX2:xwi8oUL2puPlK9le3rfCbFtDA0MjE2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9cc464895225638443227750e639b6e0_NeikiAnalytics
Files
-
9cc464895225638443227750e639b6e0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 512B - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB
.shik Size: 512B - Virtual size: 4KB
.nbd Size: 512B - Virtual size: 4KB