Behavioral task
behavioral1
Sample
efe03cd8e982dc0d7d716595f04297d0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
efe03cd8e982dc0d7d716595f04297d0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
efe03cd8e982dc0d7d716595f04297d0_NeikiAnalytics
-
Size
82KB
-
MD5
efe03cd8e982dc0d7d716595f04297d0
-
SHA1
0e015e7bc87e0b8b1d8ff34900721608e02f02e6
-
SHA256
bbfe8a4d8f1aad63cb54181e7825769b997bdc461b5a0a4814fbde2e479f3589
-
SHA512
7c94ed8d4eaba156e729c12f3d60d4238a82f1b63db53a6defca2925b6436a09a2df4fdcded9b9ca71e52b6b33484f3676d2d5b198e77ed4b81c12134ec0efde
-
SSDEEP
768:8gU3AskqeBjuN3H8e1M3ufNguKOctu4QtPZuO46b30bQo4PhbVZxEYeL3y9l6Qaj:8R30FjG38e1oulZKFuL0Qlxfpj/6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efe03cd8e982dc0d7d716595f04297d0_NeikiAnalytics
Files
-
efe03cd8e982dc0d7d716595f04297d0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE