Behavioral task
behavioral1
Sample
0d797266c9cb7f2112fa109b7803a930_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d797266c9cb7f2112fa109b7803a930_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0d797266c9cb7f2112fa109b7803a930_NeikiAnalytics
-
Size
1.4MB
-
MD5
0d797266c9cb7f2112fa109b7803a930
-
SHA1
23a0f1f57f2b05e27fcd497efbeb079929b6f559
-
SHA256
a7ecb8454a20cf15c4d52b1593969d5ad8f7a54aa428b7ba4fa503262f4be99b
-
SHA512
e5343356c6079ac6dd933b8716852132cc8f562858630873b6efe12336b7949a6038ed4353eb3eb5afcd38b61c854b09a7f3d487566669b2e8d75661a93cabde
-
SSDEEP
24576:VeIS1awThF3pI4S0HYaOUFgcoamNTPHIbvZvPgIXihVcsh84D56vKe44JEF89qzs:MKwrdp4cmCZ3gYiPcC8E6veS9Gw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d797266c9cb7f2112fa109b7803a930_NeikiAnalytics
Files
-
0d797266c9cb7f2112fa109b7803a930_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE