Behavioral task
behavioral1
Sample
9c5829ea065402dc25efb570ea665ad0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9c5829ea065402dc25efb570ea665ad0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
9c5829ea065402dc25efb570ea665ad0_NeikiAnalytics
-
Size
181KB
-
MD5
9c5829ea065402dc25efb570ea665ad0
-
SHA1
848abf12e0d0a275723a96f52f666412fdadb346
-
SHA256
98a6ac34f15a0d7c17a4627905eb03942b0456fc13bc348a74d65ccbb631e09c
-
SHA512
e0a877bad170796d75dcac46fb67f904a7611193d934607c6355c7cb41eb77537e635912074a566c4463fd0ea1b9d2842ae3dac486e82be04dbfdf1f9c1e3352
-
SSDEEP
3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIutclc+:JiQSo1EZGtKgZGtK/CAIuZAIuo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c5829ea065402dc25efb570ea665ad0_NeikiAnalytics
Files
-
9c5829ea065402dc25efb570ea665ad0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE