Behavioral task
behavioral1
Sample
2aac8f42f886350903e7fde599e87fe0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2aac8f42f886350903e7fde599e87fe0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2aac8f42f886350903e7fde599e87fe0_NeikiAnalytics.exe
-
Size
552KB
-
MD5
2aac8f42f886350903e7fde599e87fe0
-
SHA1
acde3eacf6997275646fb527a9c6e1cbe1ea97ce
-
SHA256
475293ea6081a6a2fcfe046fe3493f0df03f8ac13a4eb40401727a61aa4e4f50
-
SHA512
663b0d7dce544e84a8cddb3e1950427babb024703f2163b26176d5eb52d33055fe248832dab251621c61f223a728ed17d6c1e19fb172f0d929c1b819c54abbfd
-
SSDEEP
12288:VEQoSfqFtb4GfO1Hetqx+NbVnlWUq2HeGMnGpyFe/8O1bkCfk8M7lX556:V8G5kq8xk/8RMn5FdOpk48t556
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aac8f42f886350903e7fde599e87fe0_NeikiAnalytics.exe
Files
-
2aac8f42f886350903e7fde599e87fe0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE