Behavioral task
behavioral1
Sample
b2aa4b1fbd4e35e392b92a3dc7303a4d_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b2aa4b1fbd4e35e392b92a3dc7303a4d_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b2aa4b1fbd4e35e392b92a3dc7303a4d_NeikiAnalytics.exe
-
Size
234KB
-
MD5
b2aa4b1fbd4e35e392b92a3dc7303a4d
-
SHA1
12a62b3ebe40e0f4fc930b6505b3c5e07a55b413
-
SHA256
eb037a8caa452218fbe8fd00bfa20bc487e9565ff70cc4e9e9da98224576efc6
-
SHA512
a754c722caa6de4f719c1599a6abc21338d3a7dd4006a28498f5661a963785a8bc872e6b79d07b50e0ddd348254e9455e222db4c08a8c16f0c108406dcccd879
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhf2fAIuZAIuYSMjoqtMHfhfj:JmCAIuZAIuDMVtM/4fAIuZAIuDMVtM/1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2aa4b1fbd4e35e392b92a3dc7303a4d_NeikiAnalytics.exe
Files
-
b2aa4b1fbd4e35e392b92a3dc7303a4d_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE