Behavioral task
behavioral1
Sample
489b19ffffc2f236cdf0c5085fc5e770_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
489b19ffffc2f236cdf0c5085fc5e770_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
489b19ffffc2f236cdf0c5085fc5e770_NeikiAnalytics
-
Size
780KB
-
MD5
489b19ffffc2f236cdf0c5085fc5e770
-
SHA1
7aa5736f8abd55870a829af7674849f602f949ff
-
SHA256
9a7ef654c384b3b5a9acd4a4bff623fda9cc7220271955405d0420e2beb0f0cc
-
SHA512
93e50ce2be15972573c7859f78544c4266e4baa8cd74af6d6c6b0697c7447c2ae663cf553c3b235c98dcc1d2839c1afdea0dff0023ca4d72e1dfb4788d9b919e
-
SSDEEP
12288:ihkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcxoLiTd0:CRmJkcoQricOIQxiZY1aoLiTd0
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 489b19ffffc2f236cdf0c5085fc5e770_NeikiAnalytics
Files
-
489b19ffffc2f236cdf0c5085fc5e770_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE