Behavioral task
behavioral1
Sample
b20cc6803c03662ff76250b6fe970270_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
b20cc6803c03662ff76250b6fe970270_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
b20cc6803c03662ff76250b6fe970270_NeikiAnalytics
-
Size
2.3MB
-
MD5
b20cc6803c03662ff76250b6fe970270
-
SHA1
cdad2fb154121f9458bbb8536bd35e1b615cd7f2
-
SHA256
c66d4958cf5912cf7a61f58db66f182b88a130c587f1df2a04feddf3a96e086e
-
SHA512
168db8eaba0b774598e24e4be2545bc4c4e68bb9b2cb881c8d14d4ca8caccb9202204f2e9e2f6ca4c2f78fb3cee3c61f28a546483745f5621429e5d519767278
-
SSDEEP
49152:byAmDrKkA+/qlGL5lqINA3+WyGPHlf46SOxKVORT3AQfYDNRt1i/eI3C:btWr8GVRpGPVSOI0MQQt1i3C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b20cc6803c03662ff76250b6fe970270_NeikiAnalytics
Files
-
b20cc6803c03662ff76250b6fe970270_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE