Behavioral task
behavioral1
Sample
dde7baa5060cd907cc1666ce789416c0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dde7baa5060cd907cc1666ce789416c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
dde7baa5060cd907cc1666ce789416c0_NeikiAnalytics.exe
-
Size
44KB
-
MD5
dde7baa5060cd907cc1666ce789416c0
-
SHA1
5862df7e2ae89fb363f34c3177056ca5aeb106de
-
SHA256
a4e969e5e454e175ef67abdee27625bbdffa53a9cd16b7148d9122feb9a6430d
-
SHA512
9bf102da6648b16014144f3aff773a90f6b77a63b89682dec68c2d060d058fad297321e327a69532ab14203f31f7a19c33ee3ae89b5d1e1473166858bbd2326d
-
SSDEEP
768:k6+h5nWLQF/NwwCtS50BQifgvYnbcuyD7Ur4D:k6W5WLiVwt9pfgvYnouy8r4D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dde7baa5060cd907cc1666ce789416c0_NeikiAnalytics.exe
Files
-
dde7baa5060cd907cc1666ce789416c0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE