Behavioral task
behavioral1
Sample
ccf18b63a72ee5d9b256fd2d74faa120_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ccf18b63a72ee5d9b256fd2d74faa120_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
ccf18b63a72ee5d9b256fd2d74faa120_NeikiAnalytics
-
Size
1.5MB
-
MD5
ccf18b63a72ee5d9b256fd2d74faa120
-
SHA1
9909f644c9564a042781cf398712946bdceff92d
-
SHA256
8bb52eaa16b42f6c0567ccc31754bef716f57fa4f81702f178695c8f1ed47f2b
-
SHA512
ee54d3c9f95f288b454227610e5017f63ea5c01baf2c7bdf1c6de3a4badacc1e20ce48c917e0b09ed6e558e0be51e731ca130f5f886faf84b74e70c26086dc22
-
SSDEEP
49152:ngiGJLWZkVZJaY+b0K62MOSS4XFT6v7XX3:ngiGJ6M/rIM15VTwX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccf18b63a72ee5d9b256fd2d74faa120_NeikiAnalytics
Files
-
ccf18b63a72ee5d9b256fd2d74faa120_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE