Behavioral task
behavioral1
Sample
e4c4c8d014038e76b2dc09ec76d135e0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e4c4c8d014038e76b2dc09ec76d135e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
e4c4c8d014038e76b2dc09ec76d135e0_NeikiAnalytics
-
Size
89KB
-
MD5
e4c4c8d014038e76b2dc09ec76d135e0
-
SHA1
7bb83fd32db29dc57b1b867ac6081c1b6fa8ee82
-
SHA256
b40ad10c8ae23f0a28ea9bd1cf2c27ed66be376148928f39d50b589edf7f465b
-
SHA512
127ee8cce868a0e6adeaf005d87800cb13e4dd191adc9c41ced1a14c259274f216ba54814ceea6836be6d24fafb727a4601a9f71a1013a30afe125d4ef428666
-
SSDEEP
1536:TYjIyeC1eUfKjkhBYJ7mTCbqODiC1ZsyHZK0FjlqsS5eHyG9LU3YG8nxD:0dEUfKj8BYbDiC1ZTK7sxtLUIGe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4c4c8d014038e76b2dc09ec76d135e0_NeikiAnalytics
Files
-
e4c4c8d014038e76b2dc09ec76d135e0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ