Behavioral task
behavioral1
Sample
97b26475de07b22753fbdbd212c156a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
97b26475de07b22753fbdbd212c156a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
97b26475de07b22753fbdbd212c156a0_NeikiAnalytics
-
Size
244KB
-
MD5
97b26475de07b22753fbdbd212c156a0
-
SHA1
5970b6d89e46a80f4c378601927847ee97a75316
-
SHA256
5aa9d84261f84e10de8a11f80372abe73c64099f43ace8176a28de27875d9537
-
SHA512
66a9736eb2953a246b5dd7fbdffbea2c905f502fded006b4c66b983b39810f7df9b161d3cb3b1f25bd74d28bcd7272fb18a6c1f9c366f51be754c2119aa671d0
-
SSDEEP
6144:X42FMaP+6+tT/JBnjBE3XwfSZ4sXKzQI6F:IKbGlJBjBEnw1EI6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97b26475de07b22753fbdbd212c156a0_NeikiAnalytics
Files
-
97b26475de07b22753fbdbd212c156a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ