Behavioral task
behavioral1
Sample
29ff39ea87e8224fd248616372d70a00_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29ff39ea87e8224fd248616372d70a00_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
29ff39ea87e8224fd248616372d70a00_NeikiAnalytics
-
Size
91KB
-
MD5
29ff39ea87e8224fd248616372d70a00
-
SHA1
45771abc3d1eee0848124aaa9b506cbccad72bd6
-
SHA256
c162712b8a1559a49ca4cb81daf99e21eab11365256703be4ad11fde5a09f6af
-
SHA512
cee8747a1ceb0b050f1c36da9502f24712fcbf9700d59d9022f5be72f749c6a4e9430362a5a94e40b95d49e5afd302a591af07cf63c2d35788e1d14780092101
-
SSDEEP
1536:XRsjdLaslqdBXvTUL0Hnouy8VjMRsjdLaslqdBXvTUL0Hnouy8VjYf:XOJKqsout9MOJKqsout9Yf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ff39ea87e8224fd248616372d70a00_NeikiAnalytics
Files
-
29ff39ea87e8224fd248616372d70a00_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE