Behavioral task
behavioral1
Sample
51ce32d1a4618f0f49b82c67a7affd00_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
51ce32d1a4618f0f49b82c67a7affd00_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
51ce32d1a4618f0f49b82c67a7affd00_NeikiAnalytics.exe
-
Size
42KB
-
MD5
51ce32d1a4618f0f49b82c67a7affd00
-
SHA1
a68024fbf0473218ee28cdc77ca834659a66d0dd
-
SHA256
a18534f81eeb48d4417416d6aa29a18b8575b7232790de5c5e4b48b80648dc0b
-
SHA512
e7db3a9c88d940ec411a122dc3c0a1f3b7b5a018d352468afd4d5e9202a767f422d753bf2fd1c86fb536334f8bd8b3a054be86ab9a3a2c9b7b0be61313df1b60
-
SSDEEP
768:L6uh5nWLQF/NwwCZS50BQifgvYnbcuyD7U:L6m5WLiVwtppfgvYnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51ce32d1a4618f0f49b82c67a7affd00_NeikiAnalytics.exe
Files
-
51ce32d1a4618f0f49b82c67a7affd00_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ktlju Size: 4KB - Virtual size: 4KB
.wu Size: 512B - Virtual size: 4KB