Behavioral task
behavioral1
Sample
5df92187a346635810e35a71f35bbe20_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5df92187a346635810e35a71f35bbe20_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5df92187a346635810e35a71f35bbe20_NeikiAnalytics
-
Size
128KB
-
MD5
5df92187a346635810e35a71f35bbe20
-
SHA1
26ae8f176d91b8e92cf3b6a4e5939a6b55444486
-
SHA256
2f036be38eaf3277767b711efcc7e294fcab5a7202f09de31e2e5c37cc89fced
-
SHA512
fba16da6288d8923f134ee5a8b28b39cb3b1aac2b9bccc34b12a27a0a69ac22d8baf920c03bfd5f9719eef14015aaf2e061c164bb90191fe7da31b3f65a8f6fe
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhf5SGfFpsJOfFpsJ1:JmCAIuZAIuDMVtM/XSt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5df92187a346635810e35a71f35bbe20_NeikiAnalytics
Files
-
5df92187a346635810e35a71f35bbe20_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE