Behavioral task
behavioral1
Sample
ca93c55d47fa475c5b89c952e28b66b0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ca93c55d47fa475c5b89c952e28b66b0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
ca93c55d47fa475c5b89c952e28b66b0_NeikiAnalytics
-
Size
97KB
-
MD5
ca93c55d47fa475c5b89c952e28b66b0
-
SHA1
4e6455d8b0c04aa66c6a35e86310fb60ec357ffd
-
SHA256
ff0f0a55898fc394babd363a4f7c71493a431ccd526a41704f37f424f9d8e128
-
SHA512
1fd7a483e544a91491269c166ace8b54d2297776645acd42a5fb3e06c003f3495ce898a22847c2c19916958edfb167266c495ddaa9a55b5c217fbc4e2ce70ed7
-
SSDEEP
768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5foDN:CzqsQ5PIt4+/yfeB6r6YcOik5MnXd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca93c55d47fa475c5b89c952e28b66b0_NeikiAnalytics
Files
-
ca93c55d47fa475c5b89c952e28b66b0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE