Behavioral task
behavioral1
Sample
08cc6d503e5d13f65fd2bdd115bedab0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08cc6d503e5d13f65fd2bdd115bedab0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
08cc6d503e5d13f65fd2bdd115bedab0_NeikiAnalytics.exe
-
Size
87KB
-
MD5
08cc6d503e5d13f65fd2bdd115bedab0
-
SHA1
43cd5452b1fdba18132ceeb157dace75a7c1bf2f
-
SHA256
8c057855c8d4a9839c941d362b8fe38b62e0ed676f657dbab81dbbb7653a3f8a
-
SHA512
17f42abb3c4d6fa8fba7b95f0f7f765820e34d72b006872df8b804b1844cfaa3ffd1eb9696d759b1d1ddcdba2349ebe73004e598ad43182e1be210104b2cabef
-
SSDEEP
768:+f6YPyNNUuvW/DNa8Zz5iQ6hxT8T3oWxPgkKgH63VTha8Jxy2m:pbUuGNa8Zz5iQ6hxT8LKga3VThaX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08cc6d503e5d13f65fd2bdd115bedab0_NeikiAnalytics.exe
Files
-
08cc6d503e5d13f65fd2bdd115bedab0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE