Behavioral task
behavioral1
Sample
346e651e231126763756b4d4ffc77540_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
346e651e231126763756b4d4ffc77540_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
346e651e231126763756b4d4ffc77540_NeikiAnalytics
-
Size
136KB
-
MD5
346e651e231126763756b4d4ffc77540
-
SHA1
34b34d43cd4a34e3d05c2c0e8cfccfd5db0850b1
-
SHA256
662068e6cff2042918f17ac132173c48f2b871df956afdfe313d0f6af5c04f6b
-
SHA512
563d07832f9ba788a17183468dd011c2150f4ccd72db063f50e5a5b32eedb456ad82d4485e6a50c0ee8bf08fa34855e3584a97c50b7c7f9c966aff36efa942cd
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhf5Ssk/6cgu:JmCAIuZAIuDMVtM/XSD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 346e651e231126763756b4d4ffc77540_NeikiAnalytics
Files
-
346e651e231126763756b4d4ffc77540_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE