Behavioral task
behavioral1
Sample
c60d3ed033344ff9127c55ffe1566990_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c60d3ed033344ff9127c55ffe1566990_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
c60d3ed033344ff9127c55ffe1566990_NeikiAnalytics.exe
-
Size
77KB
-
MD5
c60d3ed033344ff9127c55ffe1566990
-
SHA1
d2e1ed80b11ef511659e3e71ce7278d44d431f0d
-
SHA256
f2eff4d1ee65cacc88e11b948b5bec7f517178c3ada61bc88c44c24dbfe9d52e
-
SHA512
e5a8f0b9e5e0d3ea818b1320f22707309a230dc7a70fa9bae306a898166973cec6be4d83f81ec69880791d237993a9a4f13612cd76669d10aa47138b1adf1828
-
SSDEEP
768:80vdNL9vUupWcNa8Zz5iQlmxpuoKgPvkHVyXU:80vdNLtUuFNa8Zz5iQlmxIoKgXk1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c60d3ed033344ff9127c55ffe1566990_NeikiAnalytics.exe
Files
-
c60d3ed033344ff9127c55ffe1566990_NeikiAnalytics.exe.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE