Behavioral task
behavioral1
Sample
38d12eff82785e5648d872f2051e5b60_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
38d12eff82785e5648d872f2051e5b60_NeikiAnalytics.exe
-
Size
379KB
-
MD5
38d12eff82785e5648d872f2051e5b60
-
SHA1
85f679a71f4c313b21ec86162a0dbc924e2d1b73
-
SHA256
bcd49c0ac516e208ec750e0f97a9d7833c89012cdcc059064cfa1aea41fb2f8f
-
SHA512
69a280e6751c415d594a2575ffdfa98150965fb69acb31e1c079d0231d2b531ca09d359a567eaf760a8ccc8a97bfa44af6dc3190620f3f30c376c2c731427992
-
SSDEEP
384:XqnuO1JCHYdHz4XpfHEI6/dDEPjaVC6fMbUyFm0tyXLBI89wvuAv1mwnA3Z3BXRM:Xqnum1F6/789ujYTyLylze70wi3BEmk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38d12eff82785e5648d872f2051e5b60_NeikiAnalytics.exe
Files
-
38d12eff82785e5648d872f2051e5b60_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE