Behavioral task
behavioral1
Sample
ec245ebaa3676a8836d77dd78ee5c6e0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec245ebaa3676a8836d77dd78ee5c6e0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
ec245ebaa3676a8836d77dd78ee5c6e0_NeikiAnalytics
-
Size
1.2MB
-
MD5
ec245ebaa3676a8836d77dd78ee5c6e0
-
SHA1
b01b641abe3525e6b3333bab5f4dae335b0ee76e
-
SHA256
fa35f7e36a4d0e574d5339ed9c03d10e8cceb3387374a438a84af28fd227acec
-
SHA512
9567eef091ef7cf723755139423596653ab3b8489b60ccbdb58b24c3c2961bb1fda1498252ce7a34536b3c236095f085b15819e0bec18046189eacb98024a976
-
SSDEEP
24576:V8+Rbpn7p5sRmDvSWSp0TPFPjWH7LSrRmXEqeoR0X6qJ8j8sFXEv:W+Jpn9ewrPSp2jRmXJeoR0X6nXa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec245ebaa3676a8836d77dd78ee5c6e0_NeikiAnalytics
Files
-
ec245ebaa3676a8836d77dd78ee5c6e0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE