Behavioral task
behavioral1
Sample
cb369d693ec9e0f292a7a4fddfa6d470_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb369d693ec9e0f292a7a4fddfa6d470_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
cb369d693ec9e0f292a7a4fddfa6d470_NeikiAnalytics
-
Size
635KB
-
MD5
cb369d693ec9e0f292a7a4fddfa6d470
-
SHA1
8c478e12d4045c28aba2ff0aed868a8d05ccca6b
-
SHA256
e412a922e06a755fcbb67f13a1dd1d864577235ddd892460ea06c41d63c4e86c
-
SHA512
fa038b8cec6ebe0b4f0a235b784284dca621a507cf3cd4b9379bd5ea4a12fa6631c0f1291e85fa041578523247d3eea066fdc796af782cb55790ff3b52371dff
-
SSDEEP
12288:ooA1Z71dE2MP2C9M5QGanKOR6EItICEx2BNUL3d:yZJyhP2ZNltRW2B6Td
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb369d693ec9e0f292a7a4fddfa6d470_NeikiAnalytics
Files
-
cb369d693ec9e0f292a7a4fddfa6d470_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE