Behavioral task
behavioral1
Sample
199500c3d34a43f4dbbb5cc35beff8c0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
199500c3d34a43f4dbbb5cc35beff8c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
199500c3d34a43f4dbbb5cc35beff8c0_NeikiAnalytics.exe
-
Size
838KB
-
MD5
199500c3d34a43f4dbbb5cc35beff8c0
-
SHA1
61939a26af8f833a2e371974bb8ae27a73468a56
-
SHA256
bcf9fd3a24f8a9b939aebf10bba38a10882850ea11535fce1511c155f345571b
-
SHA512
78640384d2aa4d9c7681d2c0c4e77946881652475c9f13ea51c6535910bf7cfb7e118a75f9906d2fb69ae59e1f8ea3bbe0cfc4be42290db62977a5ddf8b1013e
-
SSDEEP
24576:bSLYF8q75HmwdfF+X84ivwWyA3U1+duLpplldUBw4y/L3:bx4wVoAvwWP3BdokBwl3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 199500c3d34a43f4dbbb5cc35beff8c0_NeikiAnalytics.exe
Files
-
199500c3d34a43f4dbbb5cc35beff8c0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB