Behavioral task
behavioral1
Sample
9610cacbd2795b4efcddf38b49ff88f0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9610cacbd2795b4efcddf38b49ff88f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
9610cacbd2795b4efcddf38b49ff88f0_NeikiAnalytics
-
Size
620KB
-
MD5
9610cacbd2795b4efcddf38b49ff88f0
-
SHA1
95b45f1b7ca8092142788bc8b6962283ef950a8f
-
SHA256
340d2ec969d047ccbcfd86213216159ed2c38ff5d3749ac685efe121d4cb0548
-
SHA512
fe89107210eacf2aaa041e2bdef5c0a39b241e6024bcc660bf9725fb6e8aca18e78f990258db1b8e2714dd88963543a0fce23187d6374f4ca6192c02eb231fea
-
SSDEEP
3072:uCaoAs101Pol0xPTM7mRCAdJSSxPUkl3Vn2ZMQTCk/dN92sdNhavtrVdewnAx3w4:uqDAwl0xPTMiR9JSSxPUKl0dodHBwS6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9610cacbd2795b4efcddf38b49ff88f0_NeikiAnalytics
Files
-
9610cacbd2795b4efcddf38b49ff88f0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE