Behavioral task
behavioral1
Sample
17c72483b34d1e53b774aafdddb651b0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17c72483b34d1e53b774aafdddb651b0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
17c72483b34d1e53b774aafdddb651b0_NeikiAnalytics
-
Size
1.8MB
-
MD5
17c72483b34d1e53b774aafdddb651b0
-
SHA1
0b532c5b94e2f75c062858f78ef33a98797dd26c
-
SHA256
90febea043455748cde48b1d5258931c8c7941bbcb7be833d6979b9b45b8bf83
-
SHA512
4836585a0c8d04a05476a19a26b3caf4b42df828e4387d60ad95c60194540cfdafac7d8a6f45f693ebd51ee783b807e2aa6d316cce559152b8453a259d6acb88
-
SSDEEP
24576:lUN88sMmUn7bUMyxGh049Z4+GhOl7/UPh48cSzltWIdD4rE5K4F16d1eEv+fcLV:+a8sqnMPI0y4+GMSYSzGIFO+zF1wvmkR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17c72483b34d1e53b774aafdddb651b0_NeikiAnalytics
Files
-
17c72483b34d1e53b774aafdddb651b0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE