Behavioral task
behavioral1
Sample
dbc86224afb9f1844e2c45f02431ea20_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
dbc86224afb9f1844e2c45f02431ea20_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
dbc86224afb9f1844e2c45f02431ea20_NeikiAnalytics
-
Size
64KB
-
MD5
dbc86224afb9f1844e2c45f02431ea20
-
SHA1
c53ed34c30ee3baa42d6fe3cf110ff55d6e20274
-
SHA256
3d82151289aa9747783307b82a33e3cd10e55b9d5366b0a5aa0e7fc717fb771e
-
SHA512
a69308836d31dc311278eb3158f21c6483bbe2767b92d0e295c1627a6a313e4d2d8824a04c6d0f07bc02f4d8a134e1f186f0db1dad12727f1f00f5c3475fd7d5
-
SSDEEP
768:rAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGKQLddOW/24WvPZ7:sUNHFKQbIkHvGMdOp4e7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbc86224afb9f1844e2c45f02431ea20_NeikiAnalytics
Files
-
dbc86224afb9f1844e2c45f02431ea20_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE