Behavioral task
behavioral1
Sample
d6c0641c30883c4a97f53c899b1f9930_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6c0641c30883c4a97f53c899b1f9930_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d6c0641c30883c4a97f53c899b1f9930_NeikiAnalytics
-
Size
816KB
-
MD5
d6c0641c30883c4a97f53c899b1f9930
-
SHA1
7d0a7230b1dc11875b033c03f2533fce009b3bd2
-
SHA256
a9801161fbce3e8793e59af237d704a44586d69c774d4c9730979d08c17a28dc
-
SHA512
8dcff9add0f5ec430f60e9518ce521b6fb3c8ad5d2a0a08d72145d88f8744ab6028211dd9eda3e34c9c55cc499d50ea1638ce0f7e4a2bf23b6da0ed0a7ac68b9
-
SSDEEP
12288:RhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcH/LS:fRmJkcoQricOIQxiZY1w/L
Malware Config
Signatures
-
resource yara_rule sample upx -
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6c0641c30883c4a97f53c899b1f9930_NeikiAnalytics
Files
-
d6c0641c30883c4a97f53c899b1f9930_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE