Behavioral task
behavioral1
Sample
e07b56d1a5071e0d0463752f35fb98a0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e07b56d1a5071e0d0463752f35fb98a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
e07b56d1a5071e0d0463752f35fb98a0_NeikiAnalytics
-
Size
2.0MB
-
MD5
e07b56d1a5071e0d0463752f35fb98a0
-
SHA1
00175b6f03cfb0315960bb4779e91491b93cec28
-
SHA256
503e713ce6ec60f404eb2118ca3c36650e6c6c963a433070d39877021fb93e3e
-
SHA512
6e4aea7b100cf1d9561f5c4eda2dc87952fabf93666ead054ff2d6a9838a75e523056a705042748bd78780ab1ca992837576bc9a1d26ab24cfa3bcdb34ea14c2
-
SSDEEP
49152:+v1vUYlMPE5uSIND4C+SRBfyZ+G4dDr9n9QpGGZ2+MxUf3:+NpMPQu5ND4C/RwZCH9n9QpMFUf3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e07b56d1a5071e0d0463752f35fb98a0_NeikiAnalytics
Files
-
e07b56d1a5071e0d0463752f35fb98a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE