Behavioral task
behavioral1
Sample
1d003b6cb363075f0b49c514b8c3b9a0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1d003b6cb363075f0b49c514b8c3b9a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1d003b6cb363075f0b49c514b8c3b9a0_NeikiAnalytics.exe
-
Size
155KB
-
MD5
1d003b6cb363075f0b49c514b8c3b9a0
-
SHA1
ba601cae676d0227004491aa3f5fdb514b681ccc
-
SHA256
e6e01102a6dad61d2a4873a863d5c6d15f8f12d2a9c31653cd2c023e8270beff
-
SHA512
8569406183df22ba4a13662419d01e2373498717da2184a79a91a9651f0c5a0a8e35fd5508d29c8c757ba6999f03b5ab5e2090bd6d93efd817dc6ba68340f12a
-
SSDEEP
1536:j73q4RsDRUFDPQ5geaQx1kEQ8pzc9w0V1gEXNVSHj8LVuQ2A35kRh0IdwmG:j7j+2BPXDy1kEpzB0oeNVlVewc5dw7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d003b6cb363075f0b49c514b8c3b9a0_NeikiAnalytics.exe
Files
-
1d003b6cb363075f0b49c514b8c3b9a0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE