Behavioral task
behavioral1
Sample
591b90fd1388ffe7883b3f085d88adf0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
591b90fd1388ffe7883b3f085d88adf0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
591b90fd1388ffe7883b3f085d88adf0_NeikiAnalytics
-
Size
144KB
-
MD5
591b90fd1388ffe7883b3f085d88adf0
-
SHA1
58dc17b959a55fabcedda550ee9c7005c67d16d0
-
SHA256
ed0ec335128934b87d78da1d86e2a66d2abf66a58d3009759a9eb12d3dcbab7a
-
SHA512
10b1769fd143d1f186e1277bc7e986c93450e4a9ee53be899aedc5708419401ab56dab244773e55551e3905f3cbef00a030ef86cc60a1a395927d072d6da1c08
-
SSDEEP
3072:/27TcKbnTvCIDw0x+G3dF/Ytq7xIpNelJZyi4x6:oc+2mrL/v7xIpNiJHP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 591b90fd1388ffe7883b3f085d88adf0_NeikiAnalytics
Files
-
591b90fd1388ffe7883b3f085d88adf0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE