Behavioral task
behavioral1
Sample
daf3b2c2b53a54b992ffb11bdf633030_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
daf3b2c2b53a54b992ffb11bdf633030_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
daf3b2c2b53a54b992ffb11bdf633030_NeikiAnalytics
-
Size
2.1MB
-
MD5
daf3b2c2b53a54b992ffb11bdf633030
-
SHA1
bbe377ec1170880d3e87666baa841daa6476226a
-
SHA256
216f06f6b21b9e10e73bd6594192ec9abd953de699f26411bcf6034dacc67db9
-
SHA512
774c970384b224d9e5ad3c9d9782a583ce5bb25a40247331dfe48da6db8b8e89036e3acf52a8518f130430de5947254ef2653b661f0d98d5f0b10d79c76757ec
-
SSDEEP
49152:m2rIwGSo7cDkNiBhjo40zmCdyB99GPNzCEY3OGwtJ:JUBH7cYYjo40zfdyBOPNznY3OG+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daf3b2c2b53a54b992ffb11bdf633030_NeikiAnalytics
Files
-
daf3b2c2b53a54b992ffb11bdf633030_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gtcl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oncez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bsp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ