Behavioral task
behavioral1
Sample
abd5d50c0f701a9b93547211f82a7b20_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
abd5d50c0f701a9b93547211f82a7b20_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
abd5d50c0f701a9b93547211f82a7b20_NeikiAnalytics
-
Size
337KB
-
MD5
abd5d50c0f701a9b93547211f82a7b20
-
SHA1
4d67ef70ceef478e48255bc8a5d0b8e324d16373
-
SHA256
4cd3e4dba1a3b06ae3f258973803d17a8ae6f75789edd749085fffd493bf5446
-
SHA512
a38f0e5e0e279dcbb459529b6be5569da9421d252fc67c9c9ef3a735045e68a99c08c662ee102ce2c125e2d02b04e52eac60f86256c8466ce545e7c4c3bbd055
-
SSDEEP
6144:JmCAIuZAIuDMVtM/ifAIuZAIuDMVtM/WlVO1:7AIuZAIuO1AIuZAIuO3lI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abd5d50c0f701a9b93547211f82a7b20_NeikiAnalytics
Files
-
abd5d50c0f701a9b93547211f82a7b20_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE