Behavioral task
behavioral1
Sample
c79733b1b83cc777e8decb6e52594d60_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c79733b1b83cc777e8decb6e52594d60_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
c79733b1b83cc777e8decb6e52594d60_NeikiAnalytics
-
Size
200KB
-
MD5
c79733b1b83cc777e8decb6e52594d60
-
SHA1
89a5168373ce7f82a523bec987c832a89ad950e1
-
SHA256
2afbef9ec84ca462d35159be6c667419f83835c16365f9d0030e1636aab7db84
-
SHA512
4f4e208867df6c2cf1fd6d2d9ed72fcab419566ac5bd5ff78dd88e0ce1670dd93081a45632caaad8295b7bb0b2b4cde474cf5d89152dd95576ed7ed322580048
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhf7H0WH0K6W2QZwKS7x:JmCAIuZAIuDMVtM/1H0WH0O2ZKS7x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c79733b1b83cc777e8decb6e52594d60_NeikiAnalytics
Files
-
c79733b1b83cc777e8decb6e52594d60_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE