Behavioral task
behavioral1
Sample
32ecf06f2512e952324fecfdd14422d0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
32ecf06f2512e952324fecfdd14422d0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
32ecf06f2512e952324fecfdd14422d0_NeikiAnalytics.exe
-
Size
316KB
-
MD5
32ecf06f2512e952324fecfdd14422d0
-
SHA1
5658557b4fadd85960bb0a77d1ff3cb30e2945d5
-
SHA256
3767a0e580b08793e8d7a552a2e1ac524e1d2d2da1f60887c26188a2e158bb10
-
SHA512
f9da93c3c46469216901229abdace5b9110341fb98377459ffacc6685bde505ba35b283614f5bd6d8b0e4fdb78deece9b650316865e34d1d23aa979f6b33cf98
-
SSDEEP
3072:+hDdGDsADyLLbsi/RvKgX96TfsB7aWfVhvWDWCWsQ7Hfyu3PBzk:+fGbDyLGUQfswWffvWKCm/3J
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32ecf06f2512e952324fecfdd14422d0_NeikiAnalytics.exe
Files
-
32ecf06f2512e952324fecfdd14422d0_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 303KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE