Behavioral task
behavioral1
Sample
1cc9d2678a14d636830401f6a2c7c880_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1cc9d2678a14d636830401f6a2c7c880_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
1cc9d2678a14d636830401f6a2c7c880_NeikiAnalytics.exe
-
Size
91KB
-
MD5
1cc9d2678a14d636830401f6a2c7c880
-
SHA1
a4fac063798e99520e67b28078bdf3d45097e902
-
SHA256
a2a0fce4cdf0038a355ef25504e6f2dc989f974bdb57ed879039319b755bd64e
-
SHA512
3476f7ef3790fe4ea9b5d70baf1f03c21a2a338b32b97299dfd923e1544b535f0fb3c55776be5487b210b2b145205da94e274ed034b64bfc3ea90bdb5465d35e
-
SSDEEP
1536:kRsjd3GR2Dxy387Lnouy8VTCRsjd3GR2Dxy387Lnouy8VTY:kOgUXoutNCOgUXoutNY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cc9d2678a14d636830401f6a2c7c880_NeikiAnalytics.exe
Files
-
1cc9d2678a14d636830401f6a2c7c880_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BSS Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE