Behavioral task
behavioral1
Sample
63b2a67002d082570c5f8fd8950e4130_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63b2a67002d082570c5f8fd8950e4130_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
63b2a67002d082570c5f8fd8950e4130_NeikiAnalytics.exe
-
Size
177KB
-
MD5
63b2a67002d082570c5f8fd8950e4130
-
SHA1
afe7bc2ff9400f680d6b33c756cc37627cc4ff29
-
SHA256
ea96a31d003715989601da5021d0a4f05613d4ff61ce10fbc8751d3d32722892
-
SHA512
f1378d46850ca9dba34a13bee2c4f2a5aa760072acbb09aefbfd2d24211cdb7861984d9a8f2739c5c6c83d2188ba22dcd7abd8a552367d12d7bf264ae5d36925
-
SSDEEP
1536:LCLuRBlVR/SzzJgzWttt+Yeg6r7XCH0ShclKG8CN9u9GWsxY6WiVqdU0Pz5tdJn8:LdCLMXc6KG8CNgYPWiVmU0rHfouthc
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 63b2a67002d082570c5f8fd8950e4130_NeikiAnalytics.exe
Files
-
63b2a67002d082570c5f8fd8950e4130_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE