Behavioral task
behavioral1
Sample
70e962808560ff1cc6eb2a10fa150d80_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
70e962808560ff1cc6eb2a10fa150d80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
70e962808560ff1cc6eb2a10fa150d80_NeikiAnalytics
-
Size
1.8MB
-
MD5
70e962808560ff1cc6eb2a10fa150d80
-
SHA1
b10188570976a7782423f3e2b7dbaaf8bed1a486
-
SHA256
814ff71cce3b9a9c522aa1f1f698d14331bbe7d8cbece4a313641671540c8a8b
-
SHA512
6d0b5e90c28617b011a9de1559ae34dfd94c982f433ed7de779b30ec98052a5db49a6567ce7b2be4fe38f8be75c489101ad5fe283657250112df09f8a07286e2
-
SSDEEP
49152:SOzbfU5xTSxZgzhZJ4F0X/lR65tnjzc03tz+h:rzDU7TSxqhP4F2/snvcotz+h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70e962808560ff1cc6eb2a10fa150d80_NeikiAnalytics
Files
-
70e962808560ff1cc6eb2a10fa150d80_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exjvk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ