Behavioral task
behavioral1
Sample
c6ff757aa5e9c75fe61a228574739cb0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c6ff757aa5e9c75fe61a228574739cb0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
c6ff757aa5e9c75fe61a228574739cb0_NeikiAnalytics
-
Size
1.6MB
-
MD5
c6ff757aa5e9c75fe61a228574739cb0
-
SHA1
cf67900fd70f0bd39ceb4d6aa1a1d2565562b1da
-
SHA256
7e684cf3cb33cd5667356800421be1a07ab3141053fa361838341e020b18a52e
-
SHA512
4e058d1a5fe2cf3881d7f25ea0ad3a40a9bcf41bc7b7cbb2ea81d83a8e35c89e6e82fb6e0310a9a381eabecb8dca4b03bdb37d1f4d52d53447446e81fbf6287b
-
SSDEEP
24576:NSLerZwQ+Efj4LIsYcRPvxJfvV/Zky3RJxAnve0tUriBE88D+wf9XWxAbgxjD22f:NjraQ+EfjUfXvVXRDAmLie8KzS1yQT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6ff757aa5e9c75fe61a228574739cb0_NeikiAnalytics
Files
-
c6ff757aa5e9c75fe61a228574739cb0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.lygia Size: 512B - Virtual size: 4KB
.o Size: 512B - Virtual size: 4KB