Behavioral task
behavioral1
Sample
6b0b8ffc9302bf9d2c44c2b6d2738870_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6b0b8ffc9302bf9d2c44c2b6d2738870_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6b0b8ffc9302bf9d2c44c2b6d2738870_NeikiAnalytics
-
Size
937KB
-
MD5
6b0b8ffc9302bf9d2c44c2b6d2738870
-
SHA1
37e116788fca624a71a946c3a6baa8617a5f6c70
-
SHA256
9ab8d6d10c32677f588e5a530fe3622232192942f1b802a9ee76151db8cb5937
-
SHA512
674edd13163c1e3131db7f8a833cd8bee1d868fa26b89a1e335cb0ad8d2dfd12baaf0cbf2d01d2ee177ad151dcfcbc570fbd9dad37c196c1e91f48f303c04276
-
SSDEEP
24576:A83foo0APYLhwAshNlEB5IFtI4KMh2rjT4:Aag5qYuhiMW4KMCjk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b0b8ffc9302bf9d2c44c2b6d2738870_NeikiAnalytics
Files
-
6b0b8ffc9302bf9d2c44c2b6d2738870_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE