Behavioral task
behavioral1
Sample
59c8174d65107d1146853610f66d2120_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
59c8174d65107d1146853610f66d2120_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
59c8174d65107d1146853610f66d2120_NeikiAnalytics.exe
-
Size
298KB
-
MD5
59c8174d65107d1146853610f66d2120
-
SHA1
9d51d2e0bb71313a559ba2757cf02dc6c65cdd0f
-
SHA256
786dae6cfde4fa5dd5f7132d7b4415570e86e3de8ff7c89db1edac7e870cb19e
-
SHA512
25ed99010c83442f322be849e74035fb039022d9a18d815b7bec751f4ab1eb386d53d0399dd80b36d5ef0785819b1c66f9c0942ae0862aa8153be1eab3c42d6c
-
SSDEEP
6144:O0/a7q+n/BNHyoS01qQgv7yUszRlNG2uYuSumWa3nc:Ogyq+/HyoSvDrpp23n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59c8174d65107d1146853610f66d2120_NeikiAnalytics.exe
Files
-
59c8174d65107d1146853610f66d2120_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE