Behavioral task
behavioral1
Sample
5e2a87b5170cc51d414b57888890de70_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5e2a87b5170cc51d414b57888890de70_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5e2a87b5170cc51d414b57888890de70_NeikiAnalytics
-
Size
265KB
-
MD5
5e2a87b5170cc51d414b57888890de70
-
SHA1
4510ce70e6f5649c719c2cad85a18e95bbf6eea6
-
SHA256
ff06e81032e652b285909ae0769a947ad169e170a4eea69f5190da6b8c50cb75
-
SHA512
847cacdfb6cd282dfd16da349f6de26984da360c99879ce18ce0c4b7176938296c06c7c0f5afea40661dd286d05d1fe7632fb2289eae62381770644b779d5538
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhfzKRIZ48MhZSIC38vOWSmBXdWM2posZSnJUwFU+FR:JmCAIuZAIuDMVtM/KlOW3WM2qv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e2a87b5170cc51d414b57888890de70_NeikiAnalytics
Files
-
5e2a87b5170cc51d414b57888890de70_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE