Behavioral task
behavioral1
Sample
160890d9823fae8b136c251e2ab52f20_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
160890d9823fae8b136c251e2ab52f20_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
160890d9823fae8b136c251e2ab52f20_NeikiAnalytics
-
Size
203KB
-
MD5
160890d9823fae8b136c251e2ab52f20
-
SHA1
3eccb594cfe0cdf3b438bd6b29646feaa396282a
-
SHA256
4bb806ba0e999cc6d38f4512135288db67e0c462f6af540f4581cb36f3cb5e87
-
SHA512
9e57f07835acb98c9bf742d2eb5bda1973a159313d7fe7ec57c7189c39438cb2f8d4905919b86e34c41d3ee6528985433e23ef9b0c7781f8e1b6bd901e66c68e
-
SSDEEP
3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuZwUhQ7XhxU:JiQSo1EZGtKgZGtK/CAIuZAIuZD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 160890d9823fae8b136c251e2ab52f20_NeikiAnalytics
Files
-
160890d9823fae8b136c251e2ab52f20_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE