Behavioral task
behavioral1
Sample
0da78fee9f602a96de7e3a1c9558dbb0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0da78fee9f602a96de7e3a1c9558dbb0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0da78fee9f602a96de7e3a1c9558dbb0_NeikiAnalytics.exe
-
Size
62KB
-
MD5
0da78fee9f602a96de7e3a1c9558dbb0
-
SHA1
0fc77defea704e05a6a1e713e35c51f31ec0e7d6
-
SHA256
d2388c4703310ae7405ed0f37c5dbbb01561d090b6850a37dbdcf6b624eeb7f8
-
SHA512
0d952b34d936f8810ed720eb4cbfa4cea1f75f2068dcc0b41fceeca8f6055318d682915332b19c4e199bf2e32fe99071e2c080d590022d70a6415c5143b9593f
-
SSDEEP
768:rAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGKQLddOW/g4WvrNc5:sUNHFKQbIkHvGMdO74ec5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da78fee9f602a96de7e3a1c9558dbb0_NeikiAnalytics.exe
Files
-
0da78fee9f602a96de7e3a1c9558dbb0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE