Behavioral task
behavioral1
Sample
dd01e117d949cd367acb572c57c1da50_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dd01e117d949cd367acb572c57c1da50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
dd01e117d949cd367acb572c57c1da50_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
dd01e117d949cd367acb572c57c1da50
-
SHA1
587441766cac0de8940ecf17d3f8b99cbc272639
-
SHA256
c5708a158d46dac3f196f85d4226563219396fee70f0fda36e2deeca45f83737
-
SHA512
8d3ef48b1395ccbc00dfc71c76e6eb92c0ddcd798d9dd397ad24d3acb686ad21103e8269d322b4384e4f269e6de28dcbc7fd036ba1eff630bd31602d389745d2
-
SSDEEP
24576:Ayn2RFSCpoxMRC/aCNzkEH4ZiGx1LnU0ZnL+1Su4k8jvBn3LxhGQV1szYN7GdAlJ:bojR5CNzkEH44j0lguTBDGQ1wG6OuU
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd01e117d949cd367acb572c57c1da50_NeikiAnalytics.exe
Files
-
dd01e117d949cd367acb572c57c1da50_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.3MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 26KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 42KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 211KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE