Behavioral task
behavioral1
Sample
5be171fc58af7dd09075ae14b74bfd00_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5be171fc58af7dd09075ae14b74bfd00_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5be171fc58af7dd09075ae14b74bfd00_NeikiAnalytics
-
Size
434KB
-
MD5
5be171fc58af7dd09075ae14b74bfd00
-
SHA1
7ec3eaee5b05fd41c748e459420acde1eb830688
-
SHA256
5dfb493e4570fab6583ebfbbb8d9dacc82f0727d6a9be5fa526295a2384ebf58
-
SHA512
769c4525c6143a5e60eb4102ad72b6e30f648c014dde0bde2b9f99bfb1991b8b101924f5d3fd8788ca234627c85703c3177b20189fd0e2eb861c3fea83c7c051
-
SSDEEP
12288:7AIuZAIuOuAIuZAIuO6AIuZAIuOuAIuZAIuOX:Ir3rX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5be171fc58af7dd09075ae14b74bfd00_NeikiAnalytics
Files
-
5be171fc58af7dd09075ae14b74bfd00_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE