Behavioral task
behavioral1
Sample
5a46dda140694ad05473268d8a15b430_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5a46dda140694ad05473268d8a15b430_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5a46dda140694ad05473268d8a15b430_NeikiAnalytics
-
Size
63KB
-
MD5
5a46dda140694ad05473268d8a15b430
-
SHA1
e9fd18dc018ead73130750a2be419a99bd0f8535
-
SHA256
8d5ab4cd5ce6346f16409ef023e3f3f4044e16ce2327a08adbd9ddbeaf0b9e84
-
SHA512
425278d2369eafaf80e0c61234050fa41fe83dd15bee5dc7e28b00d31475318fb16d6d26a775aa4d294dc1ce730209d5e407f319655e5ce7e55f2844fdde419a
-
SSDEEP
768:jSxam3Usjr3REXXr8yxFChMp7v9DLKrzCnbcuyD7UVeQI5no7cAvcV4RP0U+t6:jRsjdEIUFC2p79OCnouy8VDAAG4RsfU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a46dda140694ad05473268d8a15b430_NeikiAnalytics
Files
-
5a46dda140694ad05473268d8a15b430_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE