Behavioral task
behavioral1
Sample
023c976a79b3ed98747d0fbe33ae0420_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
023c976a79b3ed98747d0fbe33ae0420_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
023c976a79b3ed98747d0fbe33ae0420_NeikiAnalytics
-
Size
2.9MB
-
MD5
023c976a79b3ed98747d0fbe33ae0420
-
SHA1
b26687fce2205d43e91d345f388145fa02d6959e
-
SHA256
abef0a94a5cbb56adac5ad8333c8653e00bfa7a23bc4ee287894bba455c96d81
-
SHA512
3223a7b4323af91f061e89ee1cefb19111ecd0ce1b32d5088604658f90d5393916c82caf2abc53bacf8d669d9ad2b974cedd01c5f428102be429a7a1c07a3e9d
-
SSDEEP
49152:vzquuFWmVaKESy/tsDc5i3Kr01ClhkE402KcdBBjBOx/SlTndUN970HWcX:vQjct0coIjUdBOx6YBcX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 023c976a79b3ed98747d0fbe33ae0420_NeikiAnalytics
Files
-
023c976a79b3ed98747d0fbe33ae0420_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE