Behavioral task
behavioral1
Sample
2e3ec21698d1ce1acf5ebea0f7848fe0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2e3ec21698d1ce1acf5ebea0f7848fe0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
2e3ec21698d1ce1acf5ebea0f7848fe0_NeikiAnalytics.exe
-
Size
45KB
-
MD5
2e3ec21698d1ce1acf5ebea0f7848fe0
-
SHA1
1fec0edf23e93aa307b682a395f1b55529c99ce4
-
SHA256
e6de0d2309fc03b2788aa909d93a85c21a47104c0fa5b731cc822a39ba37eae1
-
SHA512
3e0438d40d7d08c8c9e04df97d8caa290f4b134a9fc24b5917fd07dee8f80bebc80aa08ea254f95b1f28f746cf35b7c5424d176a108d7d477e60bb7790ed95ff
-
SSDEEP
384:nJs662i3yMNpjl9FqVXYCuuLWuqA++ugDmS2yh0tgKVQytsZrgsnIx0eAh27S89O:nji9BF1nIWEDmS2yqlVxY0x0KS3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e3ec21698d1ce1acf5ebea0f7848fe0_NeikiAnalytics.exe
Files
-
2e3ec21698d1ce1acf5ebea0f7848fe0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE