Behavioral task
behavioral1
Sample
ddd7ca61894810e2e033ee21b354d740_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ddd7ca61894810e2e033ee21b354d740_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
ddd7ca61894810e2e033ee21b354d740_NeikiAnalytics
-
Size
1.6MB
-
MD5
ddd7ca61894810e2e033ee21b354d740
-
SHA1
39f85bd44c1aa3f1b7274e4dda0549bd5efdc797
-
SHA256
a09bf7d4eec1f2e015e35e1d642e03211d2c070e12d5b54d333e6fc7f3034da5
-
SHA512
0c093c2d0645e682efd7142af428bd5b5f75340c96b92c1257a095045927ee355538eb3b8a7bac331512e5a8c089f73fc351377090a9e2eea7df29013e0418e3
-
SSDEEP
24576:YoXLPgJdv5RoDSEII3Uqo9IUJ5kHZUceNhPtnUr6c22ge3RkYgGw/rN:XbIJ5QSY3OIEqHZyJUGcDge36YJCrN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddd7ca61894810e2e033ee21b354d740_NeikiAnalytics
Files
-
ddd7ca61894810e2e033ee21b354d740_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB