Behavioral task
behavioral1
Sample
17d4b5ea7d11fc3e8f9eef8b347b6840_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17d4b5ea7d11fc3e8f9eef8b347b6840_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
17d4b5ea7d11fc3e8f9eef8b347b6840_NeikiAnalytics.exe
-
Size
79KB
-
MD5
17d4b5ea7d11fc3e8f9eef8b347b6840
-
SHA1
a5a09849149563cdfd63b6e4bde7ef60d0b3980a
-
SHA256
45afc1b445d00a8bab4afda27da40b3c3f3236a525bdff9eeefe258ea262b8c6
-
SHA512
674a8a7e0b3d4c239a471846131a3ac49da91b96532eaa926fd8a75d6bb1c19cf4cf940e2aa84c20920cfe72bdb8d88be7647bb2ab3324320dd06d486fddecc4
-
SSDEEP
768:/sDOW/DNa8Zz5iQ6UxT8mxPLAKgHz3PbrnyoLgR:/s5Na8Zz5iQ6UxT8PKgT3PbrRLc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17d4b5ea7d11fc3e8f9eef8b347b6840_NeikiAnalytics.exe
Files
-
17d4b5ea7d11fc3e8f9eef8b347b6840_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE