Behavioral task
behavioral1
Sample
563dd26928da595907bae6032af51d90_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
563dd26928da595907bae6032af51d90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
563dd26928da595907bae6032af51d90_NeikiAnalytics.exe
-
Size
42KB
-
MD5
563dd26928da595907bae6032af51d90
-
SHA1
18594792cb333418c07eb201073713f0a94cce86
-
SHA256
822887a6caf1b0d206266984e7128dbbc8d8034d59e2ae61654937015b2aa8f3
-
SHA512
6be2e12ea79bba7dd2601226d9f8cb5d17dd5d4c95a54b2ef507b2cc2f919017924aa4ef66e18487e710d0c3aead6abdd81fc6e1438895bb5fefb4dac9f0782d
-
SSDEEP
768:L6Gh5nWLQF/NwwCpS50BQifgvYnbcuyD7U:L6+5WLiVwtZpfgvYnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 563dd26928da595907bae6032af51d90_NeikiAnalytics.exe
Files
-
563dd26928da595907bae6032af51d90_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB