Behavioral task
behavioral1
Sample
30a050e49a3f567fc2c7983056cdc820_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
30a050e49a3f567fc2c7983056cdc820_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
30a050e49a3f567fc2c7983056cdc820_NeikiAnalytics.exe
-
Size
91KB
-
MD5
30a050e49a3f567fc2c7983056cdc820
-
SHA1
10b845aaeda73a3142106ab367889a5d475b4b34
-
SHA256
8454c949cbdca36e697202efd9fa718c67dcd03453ef69487ca11ccb21a14a6c
-
SHA512
7de5df64bce0c55182af9933c251541864fee8a3daaa0c2ba1f81c89c01effed5f59ef57072475f89a1b99ab9c7ff315a08c59de1526a5bc5856b6ecf3f588f8
-
SSDEEP
1536:jRsjdEIUFC2p79OCnouy8VDbRsjdEIUFC2p79OCnouy8VD/:jOm9CshoutdbOm9Cshoutd/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a050e49a3f567fc2c7983056cdc820_NeikiAnalytics.exe
Files
-
30a050e49a3f567fc2c7983056cdc820_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE