Behavioral task
behavioral1
Sample
a1d3c398ec2f5d89fd4ac79c22672b80_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a1d3c398ec2f5d89fd4ac79c22672b80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
a1d3c398ec2f5d89fd4ac79c22672b80_NeikiAnalytics
-
Size
437KB
-
MD5
a1d3c398ec2f5d89fd4ac79c22672b80
-
SHA1
308fc9f1a310a74d2c927bbbaffa169d756bbcf9
-
SHA256
f0ae80403bbc7727583dd77f047015f68930be68ce9b3707a73ea5928e7fc49e
-
SHA512
f8ecd01175c397410a54faa04ecca2bdfce04e313e2d7aa7d632735569b5a523924d74845d982568c037c1edc51d9a138926950fff0764a8872864b0fddb506d
-
SSDEEP
6144:JiQSoegLO7eVYqo4AHVfqYgyKsml52/owIP1PwPvMxgDj7Y7frnbeUm2YvMKeQkg:AQtTo4A1fgyv8godP1PwPvw2M5ONeJZK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1d3c398ec2f5d89fd4ac79c22672b80_NeikiAnalytics
Files
-
a1d3c398ec2f5d89fd4ac79c22672b80_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE