Behavioral task
behavioral1
Sample
2645df2452b63166c9d6a98fe5db6f70_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2645df2452b63166c9d6a98fe5db6f70_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2645df2452b63166c9d6a98fe5db6f70_NeikiAnalytics
-
Size
320KB
-
MD5
2645df2452b63166c9d6a98fe5db6f70
-
SHA1
da95ee66c97d9c1cb7d8e32999fb9c4ef1894098
-
SHA256
0d8cfdac886190a64f73efe93b71da7c068580186821e6da2535f227df003add
-
SHA512
3c87adb6296c60ba25fa200264622f01d65443c784db5a1fa0565947b9d8ab5b2879df5307b96e93a8271febf4701c79d3678349fadb6a75168ae169ad48cf9e
-
SSDEEP
6144:VjluQoSv4DSIo5R4nM/40y1jIMuWjvRPEEUfYiDqLP/TCr/dNrYu+kwr:VEQoSfqtjIMIR+Prq8iwr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2645df2452b63166c9d6a98fe5db6f70_NeikiAnalytics
Files
-
2645df2452b63166c9d6a98fe5db6f70_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE