Behavioral task
behavioral1
Sample
e4f57ba7c257735c701a4f1a55c53580_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e4f57ba7c257735c701a4f1a55c53580_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
e4f57ba7c257735c701a4f1a55c53580_NeikiAnalytics.exe
-
Size
161KB
-
MD5
e4f57ba7c257735c701a4f1a55c53580
-
SHA1
f29d64e5834c7e07eae2067e47a326ddd38eca07
-
SHA256
e35691d2ef21f0cc81236db12cf0080d63ecd386b0b523bba5d5b6591d8350c4
-
SHA512
ecc9332a6d8f7bc207db85010d4e1041c5f0b63b81b43db465000e9aeabad8306260e1c909f72ccf98f1ca8692d78c463fac313aab24ef7c436deead6a2d960b
-
SSDEEP
3072:enaym3AIuZAIuYSMjoqtMHfhflixim0UwQ/4mCA:wHm3AIuZAIuDMVtM/NQgHA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4f57ba7c257735c701a4f1a55c53580_NeikiAnalytics.exe
Files
-
e4f57ba7c257735c701a4f1a55c53580_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE