Behavioral task
behavioral1
Sample
2c563b0ac899d1bcc54eb429ad4862c0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2c563b0ac899d1bcc54eb429ad4862c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
2c563b0ac899d1bcc54eb429ad4862c0_NeikiAnalytics
-
Size
1.1MB
-
MD5
2c563b0ac899d1bcc54eb429ad4862c0
-
SHA1
21cfabbbc1b44701062738dc088407ea2a5181f7
-
SHA256
be2292e5d2af8c757f86daec42b68090b1c147fcbc0eaee7fbcd774b5b78f140
-
SHA512
a846e5801f497e8916dacbe40dc8fa01213ab8a2d08ac9e84ccade7b75f6716ebbbd3effae5938c5594e0b11309e0a3f9ffbca7fb673523022a9ace00a047311
-
SSDEEP
24576:VEA26ek7Vd/faXkm2nDpzqLv152f509DHypVIejmVD4wMeyex1I:Qrk7VdXlpzm15g5SSzvmPMeyI1I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c563b0ac899d1bcc54eb429ad4862c0_NeikiAnalytics
Files
-
2c563b0ac899d1bcc54eb429ad4862c0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE