Behavioral task
behavioral1
Sample
b4af154d1f0274f7e4efdbc7bfa83460_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b4af154d1f0274f7e4efdbc7bfa83460_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b4af154d1f0274f7e4efdbc7bfa83460_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
b4af154d1f0274f7e4efdbc7bfa83460
-
SHA1
a26618bb02f37b10c7e02a199c6bb07ac762da02
-
SHA256
b5c109194ee2cd530f7e4cd49aeb8a0bd978c8c3ad14bbceac085d32b84bdf44
-
SHA512
b75ace480d0082777426c56f4f65bd1f43e11c47c7d12574d461f6f695970c6704a37ce0f99c03f94358b7dfef5d0f7efc5b3180f276d99c9642cb4649201852
-
SSDEEP
24576:xnn4Yj+CEzkiWYM8TyNnYQMt1Cq1uc+Y8hG1ESHDeI/y1Bu7:F4Yj+CEMJnJKZUDhGySUE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4af154d1f0274f7e4efdbc7bfa83460_NeikiAnalytics.exe
Files
-
b4af154d1f0274f7e4efdbc7bfa83460_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sy Size: 512B - Virtual size: 4KB