Behavioral task
behavioral1
Sample
ca8a684a2d453d1ed8605f107aa7a260_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ca8a684a2d453d1ed8605f107aa7a260_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
ca8a684a2d453d1ed8605f107aa7a260_NeikiAnalytics
-
Size
377KB
-
MD5
ca8a684a2d453d1ed8605f107aa7a260
-
SHA1
6a7f41802b71fefbed14810adba038fe7666bbcc
-
SHA256
44ad10f68dae05797d27b6b8b22ab64af049a7ef93fbfac282c0566c043e7a7e
-
SHA512
41573928f4f02ba68c5735cef600b996c6e4e258c1d8cfdb421664add5f3cc9286d1284aa3d72dff676a42ccf2ad45628642e4e05f577706e507651067866058
-
SSDEEP
6144:6YZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UO7B/IB2T:6SNC80I+cR3R03VseuOt/y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca8a684a2d453d1ed8605f107aa7a260_NeikiAnalytics
Files
-
ca8a684a2d453d1ed8605f107aa7a260_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UUPX1 Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE