Behavioral task
behavioral1
Sample
d926dc16416c2ee3f980a65191eb2bc0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d926dc16416c2ee3f980a65191eb2bc0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d926dc16416c2ee3f980a65191eb2bc0_NeikiAnalytics
-
Size
2.3MB
-
MD5
d926dc16416c2ee3f980a65191eb2bc0
-
SHA1
9c1ce511890b629308b055afb6bfc9fb23085f4b
-
SHA256
17486a9564250665a3f596c4dd0855f8ad9b3a4923654dda4e4356b093e0878a
-
SHA512
ae2df8b424888faf3d040c2a62622f7991399733a03155ebb6a48449b723b1a871f117225a284e5f4e32e77f0c2a78cacd1bad8499575746898802a1ccb5a8a1
-
SSDEEP
12288:KiDRK5Ll8zRb3nKawgXI+TJ6nIqZ2dNMmcAKS8443bfKPDRP5ttbLdgUdoSI:SleNKfml6odESu36PbLdgUY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d926dc16416c2ee3f980a65191eb2bc0_NeikiAnalytics
Files
-
d926dc16416c2ee3f980a65191eb2bc0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE