Behavioral task
behavioral1
Sample
1d28b0425c061c87e94b3df372983090_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1d28b0425c061c87e94b3df372983090_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1d28b0425c061c87e94b3df372983090_NeikiAnalytics
-
Size
216KB
-
MD5
1d28b0425c061c87e94b3df372983090
-
SHA1
564d63c3b012e6e4740f222994d48803b7c93f04
-
SHA256
5558575a5f3ad9fad29ab959c89e93469545fff2922db15c757e03adc69ac4c5
-
SHA512
09d1a43f63c742eafda160826348bd48b9989bcf3a9e67369bdc9ade0fddd29d8b26f942f632e8363e7505c7a09793a28b624bf4a7c4aa7f72aba1b8615580c3
-
SSDEEP
6144:JmCAIuZAIuDMVtM/reNgemxg5lf98gh7AE:7AIuZAIuO7ra6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d28b0425c061c87e94b3df372983090_NeikiAnalytics
Files
-
1d28b0425c061c87e94b3df372983090_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE