Behavioral task
behavioral1
Sample
a8dc951c3669150e0f5588da536a0d40_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a8dc951c3669150e0f5588da536a0d40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
a8dc951c3669150e0f5588da536a0d40_NeikiAnalytics.exe
-
Size
81KB
-
MD5
a8dc951c3669150e0f5588da536a0d40
-
SHA1
1bcd8dc767ea4f0f7ce792b8ce9106e79e7680f9
-
SHA256
0b2500db3b5f288391fdb4fda471d0d98915feb69f61e77a98f0590c4fa504a8
-
SHA512
c70fbffed26d0b5c826f85e0b4a9c8fc83a52fffe593ed0ee951820ad750194c21f2418dfef1f0af3ccf9de6eaac6327076e65c497de4f2dbce1568fc40e1d7f
-
SSDEEP
768:4W/DNa8Zz5iQ6uxT88VxPjdyEPd3V0rnC0yO8y:vNa8Zz5iQ6uxT88rdySd3V0rxye
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8dc951c3669150e0f5588da536a0d40_NeikiAnalytics.exe
Files
-
a8dc951c3669150e0f5588da536a0d40_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE