Behavioral task
behavioral1
Sample
8477deb68c5d53579988785e2d7eaff0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8477deb68c5d53579988785e2d7eaff0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8477deb68c5d53579988785e2d7eaff0_NeikiAnalytics
-
Size
242KB
-
MD5
8477deb68c5d53579988785e2d7eaff0
-
SHA1
85645c6c19ddb9b3dce108db1921c22024a37c0c
-
SHA256
98c60a19172e682ea9c1cc1b170b284546abf320ebe6bca48b0545589e299eac
-
SHA512
a5c5d27d4c944f305ea6479fbbbcc987928aff26c4ea0798462d7a8e1dac7cbb14cdf928dd5cc1f79834c96c2c7052d18480ec7e96a1dd6425015bb833751afb
-
SSDEEP
6144:wbyMNU3CEqEgsihpwVEoQJiCPOUuDKjoShHC:wbcHqEgjpB6IjoSQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8477deb68c5d53579988785e2d7eaff0_NeikiAnalytics
Files
-
8477deb68c5d53579988785e2d7eaff0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 524KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE