Behavioral task
behavioral1
Sample
42fba0465e723f2e73d7e4c15081e2b358f18628e1e470db834ed4b99c86e086_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
42fba0465e723f2e73d7e4c15081e2b358f18628e1e470db834ed4b99c86e086_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
42fba0465e723f2e73d7e4c15081e2b358f18628e1e470db834ed4b99c86e086_NeikiAnalytics
-
Size
1.0MB
-
MD5
9b8bda08dfe64279e73ae18e5a93db10
-
SHA1
eba19810f39ed72bfd0f215bb52b5285440fa4ee
-
SHA256
42fba0465e723f2e73d7e4c15081e2b358f18628e1e470db834ed4b99c86e086
-
SHA512
fba9a0903d7b59cf85e88d3dfa8dec8ce03ed3b3cabcec6504f8b61c18f8ed73b7b49e2cf3829240a73222331a321c5ae594029593193a1b1ea8cb1c4fd9b95c
-
SSDEEP
24576:sSLr9Ic+bjg+pXjgeBvPoj2EjdeTh0LoHKRDgwuZqNKmA:sA9IPo+uyo1jkTh0cKRDzngmA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42fba0465e723f2e73d7e4c15081e2b358f18628e1e470db834ed4b99c86e086_NeikiAnalytics
Files
-
42fba0465e723f2e73d7e4c15081e2b358f18628e1e470db834ed4b99c86e086_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tn Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f Size: 512B - Virtual size: 4KB