Behavioral task
behavioral1
Sample
927e03595edf859c7b7059cc9dad7770_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
927e03595edf859c7b7059cc9dad7770_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
927e03595edf859c7b7059cc9dad7770_NeikiAnalytics
-
Size
294KB
-
MD5
927e03595edf859c7b7059cc9dad7770
-
SHA1
9ce1e8f9bfd67c18b1fc908d6392b0f5f8c99949
-
SHA256
aa6cbeb55be98d76e051740d1abedd204b49914c10f518af22aa754a0bcf2d9c
-
SHA512
b440cc6b3842b9cd625b19de6da07cdfc55900c6ff047a14b825e1a22b8c717587107fb6ae111ee2f79f8611092f431df266c8de318d3649f5f7a176ddb865ab
-
SSDEEP
3072:L64TRnltulOuQuT1XwNMVXz5Gs9OGsLo3JEg+I:NTpKz8aLsLiqI
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 927e03595edf859c7b7059cc9dad7770_NeikiAnalytics
Files
-
927e03595edf859c7b7059cc9dad7770_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE