Behavioral task
behavioral1
Sample
35f6753e5ebad322801e2d550d761480_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
35f6753e5ebad322801e2d550d761480_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
35f6753e5ebad322801e2d550d761480_NeikiAnalytics.exe
-
Size
99KB
-
MD5
35f6753e5ebad322801e2d550d761480
-
SHA1
17dfb92fa0c8cc07b06397bbb169b7e6cf3258e0
-
SHA256
4e0fe15312af3e79ec8ad445d06cc1f5752238a48d500fc423fe43a91dd71165
-
SHA512
4e5d501a8c77acfc372f0b5ec5126ebc91e603dd4f6ef7e66686d62d10bda789404d847ed1fd1bd13444317cdbe99ebea2dbdf4228ef2bd9355fbb810786b66e
-
SSDEEP
768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAy1:CzqsQ5PIt4+/yfeB6r6YcOik5h36lq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35f6753e5ebad322801e2d550d761480_NeikiAnalytics.exe
Files
-
35f6753e5ebad322801e2d550d761480_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE