Behavioral task
behavioral1
Sample
de8978f5bc8e8656137176735255abf0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
de8978f5bc8e8656137176735255abf0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
de8978f5bc8e8656137176735255abf0_NeikiAnalytics
-
Size
1.0MB
-
MD5
de8978f5bc8e8656137176735255abf0
-
SHA1
90995c0f3b4194db588b31c4e95e1f9bd0707832
-
SHA256
1a13e139fa696d945de2440b8ccae40e8ec5cd399802d6b0eed8c01ff50ed900
-
SHA512
00005d0b80edff253c07f3d8e1a110fe3561ece7d8c546ec4b9eff2e993d9b94ae4299737cd06087e4de48bca2c2f7df1cbcb0a84267b472d4b93d819e9bc83e
-
SSDEEP
24576:bSLAqfB9i0zEl6ZBztmorMmXs3TZlZznwieHvPTl:bvu20zE6ZBR1kXxwieH3Tl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de8978f5bc8e8656137176735255abf0_NeikiAnalytics
Files
-
de8978f5bc8e8656137176735255abf0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB