Behavioral task
behavioral1
Sample
30a8080649dd83b31e77d6d94b357b20_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
30a8080649dd83b31e77d6d94b357b20_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
30a8080649dd83b31e77d6d94b357b20_NeikiAnalytics.exe
-
Size
27KB
-
MD5
30a8080649dd83b31e77d6d94b357b20
-
SHA1
f714ed331a26b1c66b472b006bcdaac528252198
-
SHA256
43701ccf44e50954a91dec6355bab2d9c8086780cb53c0c97a55bf07fcbba87b
-
SHA512
188b6cb1f8a6cdecbce542fdafdcbe095c7b004638ecd682363b546da41d5c81392224725ce7217600b13fe6d10a1bea9a2b58e2b20ec81099c39723689aba00
-
SSDEEP
96:XbSD3E3kxkYOFsHe+WRIJVge6ygK4bd9u8XhyXrGSccSZXB2oA:XO9SYgs++WRGVcj9uKh0rGiCXB2o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a8080649dd83b31e77d6d94b357b20_NeikiAnalytics.exe
Files
-
30a8080649dd83b31e77d6d94b357b20_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE