Behavioral task
behavioral1
Sample
4ab75644621d9d1381b5f0845bc9bab0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4ab75644621d9d1381b5f0845bc9bab0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
4ab75644621d9d1381b5f0845bc9bab0_NeikiAnalytics
-
Size
1.6MB
-
MD5
4ab75644621d9d1381b5f0845bc9bab0
-
SHA1
5c916696eed291c430b70a3ca809fcc171a7a2ed
-
SHA256
565447169242c9eb13ba1f30fd668800323ea6b758f3bfc806f1364fccfbfe32
-
SHA512
9dfd885b36177f6de811d56739675e8fe223d8da391b4991cdad9be6f21224c24fa8762cbf750fbd9eb99be82a55bb0b88e82f8abc5aed0120b216d5b6e4617b
-
SSDEEP
49152:q0DGdb0d50D/hzRvhOVO3X7rvvK6oCxrwdIU:q0C1ieDptvhOkX/joCM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ab75644621d9d1381b5f0845bc9bab0_NeikiAnalytics
Files
-
4ab75644621d9d1381b5f0845bc9bab0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE