Behavioral task
behavioral1
Sample
5b97f30a4243d9e1183ee9e50103c020_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5b97f30a4243d9e1183ee9e50103c020_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5b97f30a4243d9e1183ee9e50103c020_NeikiAnalytics
-
Size
278KB
-
MD5
5b97f30a4243d9e1183ee9e50103c020
-
SHA1
7cbf0e34e79f3d9c667ceab1f9431138774046ba
-
SHA256
af45e0f70bd40951a5632de9ef37b2d16a77be9bc7fdb1167b37c0e632415aca
-
SHA512
ac76ea2bbaf177d36ab15a8f3707db53327dc9c894155f008b1ba8278484f4e1995117714b92c0b20f601a3a31fec0fc1aedaa761945fe9b4c490998b21c9b52
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhf5Ssk/6xMU90HpKOrGCLOwstyhZFChcssc56FUrgX:JmCAIuZAIuDMVtM/XSm59OpKgShcHUav
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b97f30a4243d9e1183ee9e50103c020_NeikiAnalytics
Files
-
5b97f30a4243d9e1183ee9e50103c020_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE