Behavioral task
behavioral1
Sample
f031c05f04afd01056e8d3a6ee4ca470_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f031c05f04afd01056e8d3a6ee4ca470_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
f031c05f04afd01056e8d3a6ee4ca470_NeikiAnalytics.exe
-
Size
91KB
-
MD5
f031c05f04afd01056e8d3a6ee4ca470
-
SHA1
ab397e0fd8cb815b456a14fec7e91f19da9a7400
-
SHA256
01cd9a60d9b2e0dc3e1b7e53c4ee570216b22c94cc68b187ecf4fdea9db39f8e
-
SHA512
0f0d7c7dee6720546111d250442550da1d35936abb6691d5f808e9d4be96330eb60c249ab01d9dca34a871d433ded37b90846df7131f64b71227ffbc77df92df
-
SSDEEP
1536:ERsjdf1aM67v32Z9x5nouy8VTOuRsjdf1aM67v32Z9x5nouy8VTQ:EOaHv3YpoutNBOaHv3YpoutNQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f031c05f04afd01056e8d3a6ee4ca470_NeikiAnalytics.exe
Files
-
f031c05f04afd01056e8d3a6ee4ca470_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE