Behavioral task
behavioral1
Sample
26c3a8f4ed04f48a90950dc255084d30_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26c3a8f4ed04f48a90950dc255084d30_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
26c3a8f4ed04f48a90950dc255084d30_NeikiAnalytics
-
Size
180KB
-
MD5
26c3a8f4ed04f48a90950dc255084d30
-
SHA1
0de2f4d6c1f0deb1a719ab4f1717aabf9cc726bf
-
SHA256
e4a104a895591cb4c299b3ee9a625e349eacc6e712c174685b5f603d898d1956
-
SHA512
f660593bfd32f76d3eaf180b160d3055e2557d55ea13779d1240726a86a0861cef6c31a79bf0d887ee972430f03dc4de10a958865e378e14e8fd11fb23f3a804
-
SSDEEP
3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIu23ASY:JiQSo1EZGtKgZGtK/CAIuZAIuAASY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26c3a8f4ed04f48a90950dc255084d30_NeikiAnalytics
Files
-
26c3a8f4ed04f48a90950dc255084d30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE