Behavioral task
behavioral1
Sample
535b662762b017d0249df8bc2f311510_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
535b662762b017d0249df8bc2f311510_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
535b662762b017d0249df8bc2f311510_NeikiAnalytics
-
Size
235KB
-
MD5
535b662762b017d0249df8bc2f311510
-
SHA1
f502648d5d218f054dc81e9f08612b4f64b04f69
-
SHA256
717e5e1aa733b46145b30698b2d60c868c505d7931a8c36f80e9cc9ba40f5ac7
-
SHA512
129c04e2385123b4fd77a9b2e81255102a8f5f20e57bc425852c6fefe120b368d83feb6a667a446657182190b0fe61e303953d6389a8808e07e7de52f0ca0c0b
-
SSDEEP
6144:JmCAIuZAIuDMVtM/WfAIuZAIuDMVtM//qo:7AIuZAIuORAIuZAIuOI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 535b662762b017d0249df8bc2f311510_NeikiAnalytics
Files
-
535b662762b017d0249df8bc2f311510_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE