Behavioral task
behavioral1
Sample
6a06d540d66479adc570c226f8218ce0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a06d540d66479adc570c226f8218ce0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
6a06d540d66479adc570c226f8218ce0_NeikiAnalytics
-
Size
54KB
-
MD5
6a06d540d66479adc570c226f8218ce0
-
SHA1
c1ffeb0fbeb345e19a14aa76ce7494ba947ef5b2
-
SHA256
0970d42d652bbfe53f8f14701f28046b3a4f950a789d31e792438f4f3f4324a7
-
SHA512
64455ba8bf990bf8c274275a1bfddea855fe950ee66a1664f4f1370a5a4b053b0574fa796851cdd79d20590488ed4a7ff127f082730a3c3831ad76aa285d1670
-
SSDEEP
768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2Xpfs7b:r9l+W8xFt6sh7iQroCoRB0u0sn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a06d540d66479adc570c226f8218ce0_NeikiAnalytics
Files
-
6a06d540d66479adc570c226f8218ce0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE