Behavioral task
behavioral1
Sample
1b07f5c6dd4bec6448d362a7a05b5fa0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1b07f5c6dd4bec6448d362a7a05b5fa0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1b07f5c6dd4bec6448d362a7a05b5fa0_NeikiAnalytics
-
Size
745KB
-
MD5
1b07f5c6dd4bec6448d362a7a05b5fa0
-
SHA1
d05306fda296188912e45c0336263919c88d2895
-
SHA256
6c9e0b38aaa8fa95802bfcc3832babf9603cbd035af1f5b939a8340c8c0b5eda
-
SHA512
9872b159d3d5239ea011cc987fc5619cc13c79ed012d21446cf610ba7915b2edd165fd3f248ffa0262892c8563496cf63293a10c2f8153cf36aab98666ac081b
-
SSDEEP
12288:UVgaUgSzsOx+wEXqxl6QBKlrj16huYsZVV7M3Dch/Ym1NHYfM9KT30+2yyHhuLo:Uu5gSICjIqxQQB8e7CVig/JYfMIrgVh3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b07f5c6dd4bec6448d362a7a05b5fa0_NeikiAnalytics
Files
-
1b07f5c6dd4bec6448d362a7a05b5fa0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE