Behavioral task
behavioral1
Sample
b36e3547bdb7ec820a715013c3f88a40_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b36e3547bdb7ec820a715013c3f88a40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b36e3547bdb7ec820a715013c3f88a40_NeikiAnalytics.exe
-
Size
91KB
-
MD5
b36e3547bdb7ec820a715013c3f88a40
-
SHA1
d54ab414f0ca84fa3e2f03c656b195c37f17bb95
-
SHA256
4d4ae239d447b7d7280b2480c1757c12475c8afc4ef2bcef1042ffedf45424a8
-
SHA512
3fe20bfd881147b2a322a36acc340a1d17e3167de86cbae9830f6aee859374baf236f68f4807695e7254068410a6ff0854ce4e34dc1a69cef052b0896c7cf12e
-
SSDEEP
1536:ERsjdf1aM67v32Z9x5nouy8VTbRsjdf1aM67v32Z9x5nouy8VT+W:EOaHv3YpoutNbOaHv3YpoutN+W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b36e3547bdb7ec820a715013c3f88a40_NeikiAnalytics.exe
Files
-
b36e3547bdb7ec820a715013c3f88a40_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE