Behavioral task
behavioral1
Sample
341079ed576cb78afdba137cf6a72600_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
341079ed576cb78afdba137cf6a72600_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
341079ed576cb78afdba137cf6a72600_NeikiAnalytics.exe
-
Size
896KB
-
MD5
341079ed576cb78afdba137cf6a72600
-
SHA1
750becd1f4810debe7cae7437bff913423005c71
-
SHA256
6f7ea391a552a77d7bd26aa0d4635fe7bab094c08072f8bdc398044c1a31953b
-
SHA512
9713a049456f2d81e9807e56a721d35a015b33f1ca890ffa309fe428635a62cf02cc689d5d13dd77079c0796faca543cbc0350d64d9e49656b12c6322c26fb0f
-
SSDEEP
12288:bPKL8qCG2bsu4S9w1xuPkxtk/0rmo5Np2rZXjQZTsUSZSEnwgc7yWkHnvtpB3g6a:bSLU8n1YAu/0D6ZXHUKlzcOWkHvjB+d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 341079ed576cb78afdba137cf6a72600_NeikiAnalytics.exe
Files
-
341079ed576cb78afdba137cf6a72600_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB