Behavioral task
behavioral1
Sample
cb788f1f58627c2acd2f1eff29dd7510_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb788f1f58627c2acd2f1eff29dd7510_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
cb788f1f58627c2acd2f1eff29dd7510_NeikiAnalytics
-
Size
879KB
-
MD5
cb788f1f58627c2acd2f1eff29dd7510
-
SHA1
c16cbcf7779e5dc00f3cfa997e1c55830e601ff3
-
SHA256
a81f5c3bf8329836ac7b2b8b10956337f66582ede0f2570b9567ae59074b956b
-
SHA512
8bbe25cbd05e3e2d9ab9aa8fd064b83249bb0d1c73b9aec2a822d2cbdea8daa91a2b7e67522f351b5998b22d7be599e5e3ef61ea0846edee0ee98d8e0e71e9f8
-
SSDEEP
24576:NPCiQQ3Oy4RUKLuV+dhO6jyUWGzrVUco:NRb/453RFWu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb788f1f58627c2acd2f1eff29dd7510_NeikiAnalytics
Files
-
cb788f1f58627c2acd2f1eff29dd7510_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 865KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE