Behavioral task
behavioral1
Sample
c4421ea03106e584b212a52df279f440_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c4421ea03106e584b212a52df279f440_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
c4421ea03106e584b212a52df279f440_NeikiAnalytics
-
Size
1.0MB
-
MD5
c4421ea03106e584b212a52df279f440
-
SHA1
f511cf45cb69b9e8bd011f006030d8a7b99269c3
-
SHA256
cd9114bb67369712037950309391252ae65f581be087bf7841ef1443e0f8cb61
-
SHA512
ed949b3d3d71fc87ff510e28b5e166ea0b152bab755f11045203da2c509f6628735bf547f7ffc60aeffe751d542c48b84820c1cf2ac5f1b2664fe93126b3b7a7
-
SSDEEP
24576:Z8XO5S/526ESYKDGFuJ3ZaY2hrn8gNqBjHEJX21Qd+R4:18AluBZ5Crn8g8HEJX2QdH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4421ea03106e584b212a52df279f440_NeikiAnalytics
Files
-
c4421ea03106e584b212a52df279f440_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ