Behavioral task
behavioral1
Sample
24bf6c218b388cc06ab0dca52d80e390_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
24bf6c218b388cc06ab0dca52d80e390_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
24bf6c218b388cc06ab0dca52d80e390_NeikiAnalytics.exe
-
Size
719KB
-
MD5
24bf6c218b388cc06ab0dca52d80e390
-
SHA1
8827778bc16c5169722f77dca582108cd51f03a2
-
SHA256
e593054122052143983544bda34d6b63cdd2302d19187455344d66ed0aa5c2f4
-
SHA512
d10027f6cd576a2a77fe3c87ed83ae5cc6c233088e23f94d7f9a4a78f28b9226d7dd57eb7c1a5e41561d83ce9a970c458c11c2acc8f5252555d12801d0be302e
-
SSDEEP
6144:yOLPKc6O8+EKIxCKY+wJPogZBwIZg4u0tVfXHme8xz+ZBmKgbTB:9Pp6bWloIwZ90TfXzTQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24bf6c218b388cc06ab0dca52d80e390_NeikiAnalytics.exe
Files
-
24bf6c218b388cc06ab0dca52d80e390_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE