Behavioral task
behavioral1
Sample
dfc8b0f1fa64b88678ebfb7627a1fa50_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dfc8b0f1fa64b88678ebfb7627a1fa50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
dfc8b0f1fa64b88678ebfb7627a1fa50_NeikiAnalytics.exe
-
Size
45KB
-
MD5
dfc8b0f1fa64b88678ebfb7627a1fa50
-
SHA1
cfb251cebb80450f2974b695f2ae0ef43ec9df45
-
SHA256
1e73a0eada3c40d2efd1fccdbe7aaf7e98d0a54dbe3fd3a999ab2e9047729e46
-
SHA512
a8f383875790970d8857396c8e9dc549fdb49a9455286cb25d8f97b7edaa1d1f302850c9b3db8dd8a29307884c2040f3f224f43d1258698a89f7be3ab2540d86
-
SSDEEP
384:nN9j5STtNep2LZCJ1GhVCjdYhwOQx/gydfdC6Xuj:nNWG4LwJ4XKx4ydID
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfc8b0f1fa64b88678ebfb7627a1fa50_NeikiAnalytics.exe
Files
-
dfc8b0f1fa64b88678ebfb7627a1fa50_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE