Behavioral task
behavioral1
Sample
3690393a3fc7991ed856d3e1e8163d20_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3690393a3fc7991ed856d3e1e8163d20_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
3690393a3fc7991ed856d3e1e8163d20_NeikiAnalytics.exe
-
Size
257KB
-
MD5
3690393a3fc7991ed856d3e1e8163d20
-
SHA1
39107bd8d251f3abf0d8e6a73ab50d456e9a3c2f
-
SHA256
6eb6568e3792f25b4732ebb163ed7bb0d1b002a095cb27957b5367a1580ea91a
-
SHA512
ce9a8a5aaf3f2b336ff92322b7c8078cb2432fc2985d03f82df8f95c4387e0c0ae13c5e23c0f6a8becd59428aa1afdf74638e477e634e5790107e1547ad263df
-
SSDEEP
6144:7jluQoSWIo5R4nM/40yJNfsh5a39xhvPelT/r1I/p95kapU:7EQoSaqhQ5c9zcg5FU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3690393a3fc7991ed856d3e1e8163d20_NeikiAnalytics.exe
Files
-
3690393a3fc7991ed856d3e1e8163d20_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gduz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbe Size: 512B - Virtual size: 4KB