Behavioral task
behavioral1
Sample
324eb8d8eb125c0e6cb34b341567bbd0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
324eb8d8eb125c0e6cb34b341567bbd0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
324eb8d8eb125c0e6cb34b341567bbd0_NeikiAnalytics
-
Size
181KB
-
MD5
324eb8d8eb125c0e6cb34b341567bbd0
-
SHA1
9d79c54d3aefe2078647a4e29e610a52d5bdca6a
-
SHA256
888eb6ac1e8707419eb9a4ac88344a66bc53bfeb280d7d2ae0aee593660b13a5
-
SHA512
c46c43392e7e593a94f5b32266c11bd00bd0411613f330ed264f38a55577d2a638becedd0a75e188de05ce0eb15bb5f749f22dc7687ff3ab8bc9356adbca9d61
-
SSDEEP
3072:pQFvx9HpsA2Up8IwTtIFHkKAGj5DgP2dlEkDvh+6Q3IaNfwzJQnEmn:S3OOCKLlcPKJEld2zJQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 324eb8d8eb125c0e6cb34b341567bbd0_NeikiAnalytics
Files
-
324eb8d8eb125c0e6cb34b341567bbd0_NeikiAnalytics.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE