Behavioral task
behavioral1
Sample
09b4295f7d7761b2a93ebaea88af8690_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09b4295f7d7761b2a93ebaea88af8690_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
09b4295f7d7761b2a93ebaea88af8690_NeikiAnalytics
-
Size
991KB
-
MD5
09b4295f7d7761b2a93ebaea88af8690
-
SHA1
95d5381c0c8205ed4f606455f54b864db9fe45d3
-
SHA256
0cb9c0eed181e3511ea7e878bada66743ec10412dad549c9335c3508e34076e2
-
SHA512
12fbed8f8d8682cd064687fa0503c3a8074f2f1a5ba73afe9e0488e0d0cdde63adc0336eff4044d733194692f91942e22b979fa8b2633c8f17a0a1d48c745c6c
-
SSDEEP
24576:Vk/3JBW1fLakg3pkIe5Ig/msHfmafUxz02cV50oVe:k3tT5kVL/j+afh7Ve
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b4295f7d7761b2a93ebaea88af8690_NeikiAnalytics
Files
-
09b4295f7d7761b2a93ebaea88af8690_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE