Behavioral task
behavioral1
Sample
80d7e6b78d6bf5dbb21b2cfeb7eea850_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
80d7e6b78d6bf5dbb21b2cfeb7eea850_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
80d7e6b78d6bf5dbb21b2cfeb7eea850_NeikiAnalytics
-
Size
40KB
-
MD5
80d7e6b78d6bf5dbb21b2cfeb7eea850
-
SHA1
296876ada40c8b5621dddd56af79a74e29f5b7ea
-
SHA256
e60ea04984710171ea3f4420940b3a17f4d9533cfdd70536bd7c500319e7e13a
-
SHA512
6623f9a167f94a159f8534c9c6320ada9a1415e0659232926bdc84f0b82006d25dd2931cd0ce5638f6c4224b17c09564f5029df1789216c6d4e21667e9f10bbf
-
SSDEEP
768:yiYoIfHbL8KatMHv+7dwwaleRp2OuyamBlabCY787fsByN:XbyYt7LagG3N13oDWyN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80d7e6b78d6bf5dbb21b2cfeb7eea850_NeikiAnalytics
Files
-
80d7e6b78d6bf5dbb21b2cfeb7eea850_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.extrel Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE