Behavioral task
behavioral1
Sample
060d3e58a4b9e32c736a04e2701b3550_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
060d3e58a4b9e32c736a04e2701b3550_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
060d3e58a4b9e32c736a04e2701b3550_NeikiAnalytics
-
Size
55KB
-
MD5
060d3e58a4b9e32c736a04e2701b3550
-
SHA1
4c3209c3b8ca5439a3d735747b6c376697308458
-
SHA256
57d6fdb5a2697e4585bf7a47a961ec26170e560b9b2dec00879327cb4be61d4f
-
SHA512
d2f33b5aeb8ae928e026c275ba8e5ef2cf5bbb90d338ce01d37d37a4012aa6e8cf5c973992dfc494be0718dca88fbe4b62acf9c02b6e910e95d37926f472697d
-
SSDEEP
768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2XpfsZ+:r9l+W8xFt6sh7iQroCoRB0u0sZ+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 060d3e58a4b9e32c736a04e2701b3550_NeikiAnalytics
Files
-
060d3e58a4b9e32c736a04e2701b3550_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE