Behavioral task
behavioral1
Sample
2db999efb06a984febcbdff5fa3f0a10_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2db999efb06a984febcbdff5fa3f0a10_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
2db999efb06a984febcbdff5fa3f0a10_NeikiAnalytics.exe
-
Size
36KB
-
MD5
2db999efb06a984febcbdff5fa3f0a10
-
SHA1
cdb54a708de76e3a8c0aa397d77004535c695de3
-
SHA256
18a64189ba1b595e758641ff65c17f6daf684f004e9ac90aef173a64fabd3758
-
SHA512
3d280483e6199cf42bb22108aa273bf00a6d34ab5ae5772284e87cb152bffb782b7971a07e71bd57e8d57b589d2699427f7a7279699eacf959b76c7e1c893c5d
-
SSDEEP
768:EF6uh5nWLQF/NwwClJS50BQifgvYnbcuyD7U:EF6m5WLiVwtbpfgvYnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2db999efb06a984febcbdff5fa3f0a10_NeikiAnalytics.exe
Files
-
2db999efb06a984febcbdff5fa3f0a10_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.btnj Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE