Behavioral task
behavioral1
Sample
503b7cccd64e1901b76de81acfdf51c0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
503b7cccd64e1901b76de81acfdf51c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
503b7cccd64e1901b76de81acfdf51c0_NeikiAnalytics.exe
-
Size
157KB
-
MD5
503b7cccd64e1901b76de81acfdf51c0
-
SHA1
ef2706cf918d123dc1e1259bcc4b8fb23dc291d9
-
SHA256
9badac8b857ddef3487ca288d3513ec43d6c901f251813045e0420acca07a582
-
SHA512
253d8ccb772f50f518c4c3c9fe37c81e2eb60b4f0420593b0e5c86dda0c130181810b3bc6135fcd672017b4c75871f573efc90071a3a2705f98d2049fe18b7f0
-
SSDEEP
192:Qu/jlpBJjYo7aahQzdk/3C+u03sMgoG6ZKmBv84k:xZpBJEWaahQxk/3Bu0cz6oF7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 503b7cccd64e1901b76de81acfdf51c0_NeikiAnalytics.exe
Files
-
503b7cccd64e1901b76de81acfdf51c0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE