Behavioral task
behavioral1
Sample
01131f911abbdf778dd65e8aabd5a5f0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
01131f911abbdf778dd65e8aabd5a5f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
01131f911abbdf778dd65e8aabd5a5f0_NeikiAnalytics.exe
-
Size
16KB
-
MD5
01131f911abbdf778dd65e8aabd5a5f0
-
SHA1
d08dfcdc90a68a053e70ee8a066deb4ebb649cba
-
SHA256
566b0f3fc115383c37eb578303e1147c552a6840dc14dc38f46bda5b2b273e01
-
SHA512
a71209fe9c9d23134762963e4561945d01697b873b2c4aaf9f6dde59714132f9e74717e075ab99839542fc101f96bbf37dd6f4fce149111f11ca9fe8f1e03a94
-
SSDEEP
96:eTaGh+Vnk3czhnGhdGgqVFLG/61x135sS7+PJDk0wM1khIM/Rxo7cQQE1Vl:eTJ0Vk3czhZGi535kPJDkO1sI22mE1D
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01131f911abbdf778dd65e8aabd5a5f0_NeikiAnalytics.exe
Files
-
01131f911abbdf778dd65e8aabd5a5f0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE