Behavioral task
behavioral1
Sample
aa1f64f11f8c76a12df5430218cb87c0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
aa1f64f11f8c76a12df5430218cb87c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
aa1f64f11f8c76a12df5430218cb87c0_NeikiAnalytics
-
Size
55KB
-
MD5
aa1f64f11f8c76a12df5430218cb87c0
-
SHA1
3d1e5c17622365fcf04b5a9a055ea9e2a01f59fe
-
SHA256
22eb43b1983665741e4a15eb1b9c22932b48b9982085a615db526c4e02190b7f
-
SHA512
cdab75af54e6f451f285723a967e63bb03f197804f534fd96737c3f1507cf5c1bbbc91b226f73f24b5b184e88c9d8a73b9b0d4f2615502abb7b0adb4a359d7ee
-
SSDEEP
384:5ItlYLkfSoxGMwIfUzAI7+U5QY8PfOc9cCWRLzENdloN1T8F0pEEu6AZkSX3uo9s:5+CLZoyIm5Vz2srIFLI63VvKP3K/5QP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa1f64f11f8c76a12df5430218cb87c0_NeikiAnalytics
Files
-
aa1f64f11f8c76a12df5430218cb87c0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE