Behavioral task
behavioral1
Sample
8b6387e57f2475ad25652cfabe291a80_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8b6387e57f2475ad25652cfabe291a80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
8b6387e57f2475ad25652cfabe291a80_NeikiAnalytics.exe
-
Size
225KB
-
MD5
8b6387e57f2475ad25652cfabe291a80
-
SHA1
e93996a0b1df1542df165dea6fe1b2bf0ce93f78
-
SHA256
39c1e9eeca8b54fffefdd1df64dfa0235231ded089a5663ce490d3459c2f73fe
-
SHA512
7e9baff12dff77e71289ac1ac77cb0fbf2fdb39783b21c055b4a2353242dd2d61c4595ccdf7d3ea3ace9daae45d27a580449be2c63e1c7a6c1f78ebb003f28da
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhffPP5gbeH6W2QZwKS7V:JmCAIuZAIuDMVtM/8u2ZKS7V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b6387e57f2475ad25652cfabe291a80_NeikiAnalytics.exe
Files
-
8b6387e57f2475ad25652cfabe291a80_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE