Behavioral task
behavioral1
Sample
8f47fbbd49ef3ff7c86a6dad0c629980_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8f47fbbd49ef3ff7c86a6dad0c629980_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8f47fbbd49ef3ff7c86a6dad0c629980_NeikiAnalytics
-
Size
1.3MB
-
MD5
8f47fbbd49ef3ff7c86a6dad0c629980
-
SHA1
2a14af6f939103d0622c1ddd150c201cfb54ad10
-
SHA256
a1b34225fdd71cb7788287c905c6714f3bea02c4cc39916906a273303f59dd64
-
SHA512
85bf46d9442c1063ebc058ace4ed3fcdc4946162c82855b8e50d8b4a8e52b6d96bc84e0954518cacb095c69c2c2525c89418e77a6b9686a89d16ea9cdfbb87c8
-
SSDEEP
24576:VU91zdv1sgXc2yVrChkwnc9qGwUm7WNpIOsdabvLXGMilfVT:gBv1sQcmhkw9gTBSP5VT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f47fbbd49ef3ff7c86a6dad0c629980_NeikiAnalytics
Files
-
8f47fbbd49ef3ff7c86a6dad0c629980_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE