Behavioral task
behavioral1
Sample
a6ed75b3235107fb84d13ee18e628910_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a6ed75b3235107fb84d13ee18e628910_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
a6ed75b3235107fb84d13ee18e628910_NeikiAnalytics.exe
-
Size
87KB
-
MD5
a6ed75b3235107fb84d13ee18e628910
-
SHA1
ff3b5119cd8f68a5560db3ad1f3cfa7e2705cb32
-
SHA256
5bf78016635dde3af6a3ef11d11dc9e08e1cc1af92ee066bd968b8f30f89a2af
-
SHA512
5998bcff558fc9ec1835eea1c122844b6746d4f741dc72e43c5a97a0194b27fdbbb74ab5407559744b8a03f22fa34ade3c8fa3f3f3bacd546c0b96b8cdc8e7f1
-
SSDEEP
768:+f6YPyNNUuvW/DNa8Zz5iQ6hxT8Q3oWxPgkKgH63VTha8Jxy2m:pbUuGNa8Zz5iQ6hxT8YKga3VThaX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6ed75b3235107fb84d13ee18e628910_NeikiAnalytics.exe
Files
-
a6ed75b3235107fb84d13ee18e628910_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE