Behavioral task
behavioral1
Sample
1bb3238f6138eea3d69ad36434147a1de0c6b6b2be2c11f4536f298703e822b8_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1bb3238f6138eea3d69ad36434147a1de0c6b6b2be2c11f4536f298703e822b8_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
1bb3238f6138eea3d69ad36434147a1de0c6b6b2be2c11f4536f298703e822b8_NeikiAnalytics.exe
-
Size
6.3MB
-
MD5
9eca6c9fb646b45f3345ad83c969ce90
-
SHA1
edf65121fc16589455856790908e15e0f87743d4
-
SHA256
1bb3238f6138eea3d69ad36434147a1de0c6b6b2be2c11f4536f298703e822b8
-
SHA512
d5066f4eea17a396e393bf2f24b3c9b5eebf6a6e30b9bb50474acd05af917981bc6e266a03d090c6133ce37695864d9d7694be617fdcb3e177d2c778b0390ee0
-
SSDEEP
98304:7mO/7MUV0Ele1zxbydQBlU+ysn3mN/CjiKM8nSGpL0r:7mO/9PerydQ6s3cMXpg
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bb3238f6138eea3d69ad36434147a1de0c6b6b2be2c11f4536f298703e822b8_NeikiAnalytics.exe
Files
-
1bb3238f6138eea3d69ad36434147a1de0c6b6b2be2c11f4536f298703e822b8_NeikiAnalytics.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 27KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE