Behavioral task
behavioral1
Sample
c66e576c9355c97a96f5c630e50cc8b0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c66e576c9355c97a96f5c630e50cc8b0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
c66e576c9355c97a96f5c630e50cc8b0_NeikiAnalytics
-
Size
1.9MB
-
MD5
c66e576c9355c97a96f5c630e50cc8b0
-
SHA1
be5a9d4d87fa302e86a4c7618f22f1e4da556f89
-
SHA256
0491055f8652c884e34818110161c475fd57bb5ca9e4d13c0072d9ed8394cc15
-
SHA512
e085100d51f38077ed6af6e4fe9a7b5ac859f3b116637ff3612e88223d48689f68a6435e0ff24f93914eb53ce9de4991a11a485bfbe27874f5cb9ba38b5c938b
-
SSDEEP
49152:+C1ZH8Y6SpPmUkVlMwwlRGUL+y7T6WOo9u5G:+88Y6SpPmxPqlkE5so9u8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c66e576c9355c97a96f5c630e50cc8b0_NeikiAnalytics
Files
-
c66e576c9355c97a96f5c630e50cc8b0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE