Behavioral task
behavioral1
Sample
e28358bbded79f24fd5dd55c34130c80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e28358bbded79f24fd5dd55c34130c80_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
e28358bbded79f24fd5dd55c34130c80_NeikiAnalytics
-
Size
745KB
-
MD5
e28358bbded79f24fd5dd55c34130c80
-
SHA1
fe1fffa3414f9964b99495f85be82cab97dd5962
-
SHA256
b189bf6ddd0f0aa188ee1d519245d64d07a85905b8b405dfef730820d837cfb1
-
SHA512
497691f3f9f8ebd21a6b397ee7472f3330bbf006c9f4042ca3fd8fc34e5c187588d11106c099c8cb3a7b816f7ccb3c418dd9ab31134f305fbe67d30ad69e24c3
-
SSDEEP
12288:YEQoSnqh17gOgpgcCyWA8JSxXl1RN6FUWE6+Hyx4kv7ehiTt24wWg22aBghnOv86:YoeOQfkJylvN6qWEtSx4qehGw4Hh2a4k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e28358bbded79f24fd5dd55c34130c80_NeikiAnalytics
Files
-
e28358bbded79f24fd5dd55c34130c80_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB