Behavioral task
behavioral1
Sample
8dfcfcf5e8b1196d9913aa582eb45480_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8dfcfcf5e8b1196d9913aa582eb45480_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8dfcfcf5e8b1196d9913aa582eb45480_NeikiAnalytics
-
Size
1.3MB
-
MD5
8dfcfcf5e8b1196d9913aa582eb45480
-
SHA1
e619a9862b1c9914492f663b4e3da6e2af83de2e
-
SHA256
f18793ec076bd86b9ab7a6512b5d12ef87728f85dfbf1951d238a02e809a0500
-
SHA512
3ba8294a7bc60c44333d3996f5c79000bcdc6df77cf4600a84cf29b2f33b04a7b3a3c1d082901e46cc399a3f9ee39a5bdd8c9c631ba1a8a144c8da54acfaac68
-
SSDEEP
24576:lUDND+uIP6L9K0s21KgcnMZX/44mK1Ck1R3rjUsCg7WafhV3feAbeoX:+DND+ug6LZ0rMZP4lcdb7jUsFrfv3yi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dfcfcf5e8b1196d9913aa582eb45480_NeikiAnalytics
Files
-
8dfcfcf5e8b1196d9913aa582eb45480_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE