Behavioral task
behavioral1
Sample
cf5ee4eeaad9966490fe7d31da15b240_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cf5ee4eeaad9966490fe7d31da15b240_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
cf5ee4eeaad9966490fe7d31da15b240_NeikiAnalytics
-
Size
1.2MB
-
MD5
cf5ee4eeaad9966490fe7d31da15b240
-
SHA1
1a7b2fbbc0911bb2e56aae359ba4f64502c62183
-
SHA256
501f655308fea80536aac0bb1bc7b7dd86fde5fedfebabf4fdc11e5118a3e2c2
-
SHA512
416631a78a437b2c89e0c1b5c416957614ed05ff5b76bc04439ece9e5ca18a99e1af0e8189d6529c826158b966873877742d6a94728e6cce857b0fb50471e456
-
SSDEEP
24576:VtR04iHiAy1bYhGM4lD7g99lvaMuKIas6Q2NGIr4MP6TsHbtwOf:4hmIGza7ZxIPEGIp3xH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf5ee4eeaad9966490fe7d31da15b240_NeikiAnalytics
Files
-
cf5ee4eeaad9966490fe7d31da15b240_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE