Behavioral task
behavioral1
Sample
0be220887c5a5e9ae9a620eace488a60_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0be220887c5a5e9ae9a620eace488a60_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0be220887c5a5e9ae9a620eace488a60_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
0be220887c5a5e9ae9a620eace488a60
-
SHA1
f97f4e33d112f4590aa33f8285ed95129d4142cf
-
SHA256
163c7fdf87d206c3a4c813e6ef78b1ae25bd7294c510bde08aede380a63432bd
-
SHA512
8bac74ef40d78887ab2b31517a03da07ec5a1f7e6aea766781e792f2456ac3ede858ed0e7f2749175664374ad66d0ef0402ce840594be09b087edc688eab8bef
-
SSDEEP
49152:5a9eKpk9hz4s/KNyfuOr+eMkta3ZXo6Vo4c:5asKpqhzNI9etY31PVFc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0be220887c5a5e9ae9a620eace488a60_NeikiAnalytics.exe
Files
-
0be220887c5a5e9ae9a620eace488a60_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE