Behavioral task
behavioral1
Sample
03289bf2df473d69c3e5a0ced805f770_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03289bf2df473d69c3e5a0ced805f770_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
03289bf2df473d69c3e5a0ced805f770_NeikiAnalytics
-
Size
229KB
-
MD5
03289bf2df473d69c3e5a0ced805f770
-
SHA1
4c039c8f10f85688aa3077285cc311226b1a8e11
-
SHA256
10ffabcf17ec4e7761315374880c185e523abbf72e39e3c0948641e366979771
-
SHA512
b1c15bca0974854456d8d090d9db19b58219bf991984633c1603006d05e5d87c1120c831a012ec1189ae4437c71688d36596149c21c39ae77713d2ef5e0df7b0
-
SSDEEP
3072:yq5+eYlzVV80ZWD1FfLQZxNwEdIaoutZotO7/ZVFB9zKv65rqVqR:820ZCnEbuE2aoSZZFBdw6lqVqR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03289bf2df473d69c3e5a0ced805f770_NeikiAnalytics
Files
-
03289bf2df473d69c3e5a0ced805f770_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE