Behavioral task
behavioral1
Sample
122496e28ad030e49ea6e41ff5eeeeb0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
122496e28ad030e49ea6e41ff5eeeeb0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
122496e28ad030e49ea6e41ff5eeeeb0_NeikiAnalytics
-
Size
125KB
-
MD5
122496e28ad030e49ea6e41ff5eeeeb0
-
SHA1
36a17c9196d289409e9772ddd8bd1c324b37b2a3
-
SHA256
e620620948bb10934234e05b99c314f757c3591f2a912d6c61eaf9ceacc1d3f1
-
SHA512
1b11b5b9c18b004fc19cef2c3c87f1ea4d8ef3efb55daa604a570557816e79b8c246d8b093a50cff47f6cf232e87f385138e0d833b34da4b0ffe2e3a38634c10
-
SSDEEP
1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCo:+nymCAIuZAIuYSMjoqtMHfhf5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 122496e28ad030e49ea6e41ff5eeeeb0_NeikiAnalytics
Files
-
122496e28ad030e49ea6e41ff5eeeeb0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE