Behavioral task
behavioral1
Sample
8d86df78718995c4c0c94d01c8897af0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8d86df78718995c4c0c94d01c8897af0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8d86df78718995c4c0c94d01c8897af0_NeikiAnalytics
-
Size
226KB
-
MD5
8d86df78718995c4c0c94d01c8897af0
-
SHA1
3e8a93d5047c9ab3d35cf1eb01d8f96e37a6842b
-
SHA256
e3d56e2f9d9c1db512b289b9e6abaac58f05162fee22a11c9deb3b608c9bf4cc
-
SHA512
a871ef982e8c63842a807fbd44079531b753d5b2ae9a4e09d8b4c554065120b374e118ab56bfe58a779b5a35db826a09c796f1825daf082132153aa96e9a5845
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhfcBk9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrV:JmCAIuZAIuDMVtM/WBk9iMGsSaOyiA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d86df78718995c4c0c94d01c8897af0_NeikiAnalytics
Files
-
8d86df78718995c4c0c94d01c8897af0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE