Behavioral task
behavioral1
Sample
4be2f9bbaa57368b43ce9424bc3e7fd0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4be2f9bbaa57368b43ce9424bc3e7fd0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4be2f9bbaa57368b43ce9424bc3e7fd0_NeikiAnalytics
-
Size
256KB
-
MD5
4be2f9bbaa57368b43ce9424bc3e7fd0
-
SHA1
1bf9a4748328cc5aa2a43efbe7d8c21047b9954c
-
SHA256
65a947038ce1565127fa77b13bfc9a21d55e3a6226af2e352693d79bc4fc34c9
-
SHA512
b83cc3e8a9ec6e3a32abc2adcf9ce965691eade4ab7233cceb7e4ecac45ed6d23d48835e998a0448bbdec5c2b088e9f27ab765336f0c6579972128906aed0ae8
-
SSDEEP
6144:lf4/sJYWd+ZO+oTcboiSLhCGnFo7ksYKFn3DqFn9Wp:lf4QlqMT0oignsd3rp
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4be2f9bbaa57368b43ce9424bc3e7fd0_NeikiAnalytics
Files
-
4be2f9bbaa57368b43ce9424bc3e7fd0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ASPack Size: - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE