Behavioral task
behavioral1
Sample
c6e0f30f6a4fd5b7ef0dd7c72acf72d0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6e0f30f6a4fd5b7ef0dd7c72acf72d0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
c6e0f30f6a4fd5b7ef0dd7c72acf72d0_NeikiAnalytics
-
Size
1.5MB
-
MD5
c6e0f30f6a4fd5b7ef0dd7c72acf72d0
-
SHA1
35df513ea60bd2a7ab6b145376c8120b16044b40
-
SHA256
34ab557e65213f09bc4e4f57719b92a3a978886306e310748c26c2090abc6920
-
SHA512
636db8c7d4a44b2d994a33ef884ebc646874d22f930ceb973872f3c1250c2344b3cb3f0f33ccad096f58003e9e85b98f5cfddb3d32da2b8ebda6d7ba30732a29
-
SSDEEP
24576:bHm0vJCH9qnfs+iVYR99D32Gy3coIbvUJ2IBWERdaRHTqwpfH7FPxlboMyg4GSN:jmyIqnE+iV2PVC5IaAKdNwVFPnoMypR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6e0f30f6a4fd5b7ef0dd7c72acf72d0_NeikiAnalytics
Files
-
c6e0f30f6a4fd5b7ef0dd7c72acf72d0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 512B - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB
.data Size: 512B - Virtual size: 4KB
.nbd Size: 512B - Virtual size: 4KB
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ