Behavioral task
behavioral1
Sample
06a70b56554bccec422c74e5867ef9e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06a70b56554bccec422c74e5867ef9e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
06a70b56554bccec422c74e5867ef9e0_NeikiAnalytics.exe
-
Size
18KB
-
MD5
06a70b56554bccec422c74e5867ef9e0
-
SHA1
264c341f0688c1fe14e90c60bed6ec70db5cfd96
-
SHA256
94816d5f86f27ac52bf5557a8b775d40f6df49265aa20ed74131da3d67fe6aa4
-
SHA512
0dd436f6e18d610acc72b9d3e76ab979375690fd518cdba5b1cd1dfc7fd87bb6c494207fb6d5d698632f6299c996231325f98e0f3260cac34b79a88e31339711
-
SSDEEP
96:hO94zY7lBgtbmnfKMyaxuK+brcF/uSm5ChWPwWv/+0Gb7AD8ffKvhfhfbRhA:h63lbluKOrcduSlhOGHQD8HohZbRhA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06a70b56554bccec422c74e5867ef9e0_NeikiAnalytics.exe
Files
-
06a70b56554bccec422c74e5867ef9e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE