Behavioral task
behavioral1
Sample
093f5af634e5350c7d2e84bc4a35f470_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
093f5af634e5350c7d2e84bc4a35f470_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
093f5af634e5350c7d2e84bc4a35f470_NeikiAnalytics.exe
-
Size
222KB
-
MD5
093f5af634e5350c7d2e84bc4a35f470
-
SHA1
ed91f246294adb96166b175e561f5969c4a8ffd1
-
SHA256
f7692074c37b7785f18a693019e1a9409752bf77e1dd9fb1cbad64aa07d0cb4d
-
SHA512
cc34f9fc5fef2c1db22d2f356cd5568b49c93709e33c5ed9daf5790f771f15240ea8e89973d01f7696495a18c12cd8831bd623643f012982e73885123cf6836b
-
SSDEEP
3072:adEUfKj8BYbDiC1ZTK7sxtLUIGsqDiC1ZBdEUfKjj9dEUfKj8BYbDiC1ZTK7sxtC:aUSiZTK40QuZBUX9USiZTK40+HMHR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 093f5af634e5350c7d2e84bc4a35f470_NeikiAnalytics.exe
Files
-
093f5af634e5350c7d2e84bc4a35f470_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfiFkMYW Size: 5KB - Virtual size: 4KB
DLVCtdQO Size: 8KB - Virtual size: 8KB
kdGWsyWV Size: 18KB - Virtual size: 18KB
WeeVXneS Size: 1KB - Virtual size: 1KB
JogUNhZg Size: 512B - Virtual size: 477B
vTPCYsVb Size: 512B - Virtual size: 348B
VaCesUoP Size: 66KB - Virtual size: 66KB
LGZJoShp Size: 5KB - Virtual size: 5KB
yisrKLFh Size: 8KB - Virtual size: 7KB
ACAxfBEo Size: 1KB - Virtual size: 1KB