Behavioral task
behavioral1
Sample
219aea19976f56b41a3cdcfca05e9330_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
219aea19976f56b41a3cdcfca05e9330_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
219aea19976f56b41a3cdcfca05e9330_NeikiAnalytics
-
Size
2.1MB
-
MD5
219aea19976f56b41a3cdcfca05e9330
-
SHA1
6f90db7ac30e9a1dfd6760ce561828afba695e67
-
SHA256
863563ff3d7b56013b329294feb2d1c7568962ca0919afbdff1d02a5e052df88
-
SHA512
93480af870cb4ab33d720229163c39787c0492062e229d09172189861607d2a99d4901c4536db32ae352ebebf122b81a223f31f1c1eed1612b44270dd0e95122
-
SSDEEP
49152:tpCuvROQBG0523rP59+QY08GCsCnE8VJ5rc3mGixzlRB1dWk:tpCsROQgY27P5PY08T7ETWjFlb6k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 219aea19976f56b41a3cdcfca05e9330_NeikiAnalytics
Files
-
219aea19976f56b41a3cdcfca05e9330_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE