Behavioral task
behavioral1
Sample
4eba297d7298ac06873b485b2c9ba5e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4eba297d7298ac06873b485b2c9ba5e0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
4eba297d7298ac06873b485b2c9ba5e0_NeikiAnalytics.exe
-
Size
413KB
-
MD5
4eba297d7298ac06873b485b2c9ba5e0
-
SHA1
602820e68d75db0453414560d9c1cb76df04b26d
-
SHA256
e067150a466b2b147e665933fc3a1feea1b4e9c74801783ed4182856824cf4e1
-
SHA512
31dde7acc51864b85dae63f9c546312fb3fada3a312faf536a5609bac29eb53eeb2ce20a7a2666f159e5d999400941fa85cf8ca054a1250848f5e804932510b9
-
SSDEEP
12288:AQtyZGtKgZGtK/CAIuZAIuwQtyZGtKgZGtK/CAIuZAIuBwTi:AItFItDTi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4eba297d7298ac06873b485b2c9ba5e0_NeikiAnalytics.exe
Files
-
4eba297d7298ac06873b485b2c9ba5e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE