Behavioral task
behavioral1
Sample
db8b12d85c728e4d17f80898ec69ca50_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db8b12d85c728e4d17f80898ec69ca50_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
db8b12d85c728e4d17f80898ec69ca50_NeikiAnalytics.exe
-
Size
198KB
-
MD5
db8b12d85c728e4d17f80898ec69ca50
-
SHA1
1bb8f8db8e5a98cc3501e21dfd0db8f7a707232e
-
SHA256
fb18abc1a25798fa37ed0925da8fd2757cb79cb010e7f496aa6ff462dc181aa8
-
SHA512
04d6994bd01706c1fe01160cad7cbc551c03b477621cf8072ae147ac4be4eb15fdfbf8b4011b7aa3c3f370910be2b52d23d5bee3f06a661f18e06a831f3bd40b
-
SSDEEP
1536:rrBz2asrpDgcNch/fhyX9SQvYgzvbSQh/SD2V6W1nouy8A7:rrBz2asrpDgR5yXgazvb/DV6WtoutA7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db8b12d85c728e4d17f80898ec69ca50_NeikiAnalytics.exe
Files
-
db8b12d85c728e4d17f80898ec69ca50_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 432KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE