Behavioral task
behavioral1
Sample
3aee599786f5ca9473119582ab399c90_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3aee599786f5ca9473119582ab399c90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3aee599786f5ca9473119582ab399c90_NeikiAnalytics.exe
-
Size
181KB
-
MD5
3aee599786f5ca9473119582ab399c90
-
SHA1
883cbb0dae1779f9ca6f4d82dd5ec474ec9bdbfe
-
SHA256
697275b5dce21541dd2526ffcb82f4a3c3a0e815734a56e9637c95c27fefb79a
-
SHA512
cc35c0e4da93b5df27ed6dab4beba880fa46647b3842ea82ea2447af8768c4d84247edd8536f16d271b27e9b979a30d161e454e3c03897c642133a73ebc5aeab
-
SSDEEP
3072:hINzztfivMVMYuFkV3qBnFqOLp4mvy2ACh35j5z8UJboDd7am0gqKR+n:hIVz8YurEmvy2AChTz9okKR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aee599786f5ca9473119582ab399c90_NeikiAnalytics.exe
Files
-
3aee599786f5ca9473119582ab399c90_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE