Behavioral task
behavioral1
Sample
addbaf1e2cab3efa1fb1e7f49e0de510_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
addbaf1e2cab3efa1fb1e7f49e0de510_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
addbaf1e2cab3efa1fb1e7f49e0de510_NeikiAnalytics
-
Size
288KB
-
MD5
addbaf1e2cab3efa1fb1e7f49e0de510
-
SHA1
b50df89de6775beb8232140dc2cbef120cd6b5f3
-
SHA256
fdbe1ac0be100c0da95bcca568de2406355c0947c9873460c21da9a291d716a6
-
SHA512
aea82fb60b083b1d70976e229bae8dd6c59c7599361aef570c28e7a8266602d329dc7fe6fee4445e3796fd0e7ce71e828d64c55f149df4c21496b7c5a033f684
-
SSDEEP
6144:VjluQoSv4DSIo5R4nM/40yPiL0C8IA9znwEBfUxifU/0c1xERs82BC9co:VEQoSfqHiAC8IkzwWt6EsPol
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource addbaf1e2cab3efa1fb1e7f49e0de510_NeikiAnalytics
Files
-
addbaf1e2cab3efa1fb1e7f49e0de510_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE