Behavioral task
behavioral1
Sample
2aaef8798dcdeb82ca59b0998e3397d285d2c8b2fc5a65748ebb836d5804de51_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2aaef8798dcdeb82ca59b0998e3397d285d2c8b2fc5a65748ebb836d5804de51_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2aaef8798dcdeb82ca59b0998e3397d285d2c8b2fc5a65748ebb836d5804de51_NeikiAnalytics.exe
-
Size
2.1MB
-
MD5
e3526bc8006a8e50b2a2c0f5e9b76ef0
-
SHA1
e5ee974eb7ce63fcaf7fa07b652314b9f9aef154
-
SHA256
2aaef8798dcdeb82ca59b0998e3397d285d2c8b2fc5a65748ebb836d5804de51
-
SHA512
4004aaaf4f3b4ede4b8c8cc2921d5a008b8528b928e5c379bf9a5cf168fcaacea16f11f365f4a77320c3eca66484ab140d2343b502e9be6de49654f8dc433175
-
SSDEEP
24576:bSLd3iem1VtLT1rS3kBADvV3sTyE4GiY8wFQq6INKhZUJvRmF+HlmISnPIpuvXtz:bD//+cWE1J4hZNF+HlkpdOU8x9r8D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aaef8798dcdeb82ca59b0998e3397d285d2c8b2fc5a65748ebb836d5804de51_NeikiAnalytics.exe
Files
-
2aaef8798dcdeb82ca59b0998e3397d285d2c8b2fc5a65748ebb836d5804de51_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB