Behavioral task
behavioral1
Sample
bade4ba3aef485838a85e865aadf3740_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bade4ba3aef485838a85e865aadf3740_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
bade4ba3aef485838a85e865aadf3740_NeikiAnalytics
-
Size
203KB
-
MD5
bade4ba3aef485838a85e865aadf3740
-
SHA1
5751258b96d95330ad504df28900550d0f04cd18
-
SHA256
234dc0fb2d7f693cc0649580f731d700b4241d9b26d78b1d580275bd32707a3b
-
SHA512
bc5d863e4f7493a982daaabc5ea740594a88425afc05f9b5c7e3bca95e2fa5b3f694b27bf2174dac610b01623b6b1837a6a4b18a4f0fc050607efd3e5d806179
-
SSDEEP
3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuZwUhQ7Xhxo:JiQSo1EZGtKgZGtK/CAIuZAIuZj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bade4ba3aef485838a85e865aadf3740_NeikiAnalytics
Files
-
bade4ba3aef485838a85e865aadf3740_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE