Behavioral task
behavioral1
Sample
d75728899b9a691448b19ffc4aabcb60_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d75728899b9a691448b19ffc4aabcb60_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
d75728899b9a691448b19ffc4aabcb60_NeikiAnalytics
-
Size
1.2MB
-
MD5
d75728899b9a691448b19ffc4aabcb60
-
SHA1
68f9f657e78b2d3da0437ebbe8f12203ed7a2be0
-
SHA256
d20e784ffacb0b6681afa5b86a075461ba7c8896a1d19441a6910fa1bccedf00
-
SHA512
930be66c894cc504782e62ad81e2c31c8951899ede81e7da288e01082ed0432bc2e9384dcb93f8f18464fc374edb34c08d3904fdbbf7d910cf825fc9581400e6
-
SSDEEP
24576:Vq1gLXOy5WFlkvmqJoCol3RzSq81M2V7SC0T6xSelY2OsVJTEbZ5lyHb:kG+yQ32oXN6LxF5Eb07
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d75728899b9a691448b19ffc4aabcb60_NeikiAnalytics
Files
-
d75728899b9a691448b19ffc4aabcb60_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE