Behavioral task
behavioral1
Sample
37876b875b2236a0aaf8a7372a540970_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
37876b875b2236a0aaf8a7372a540970_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
37876b875b2236a0aaf8a7372a540970_NeikiAnalytics.exe
-
Size
712KB
-
MD5
37876b875b2236a0aaf8a7372a540970
-
SHA1
500e9aaf76b2565f48c3b3009ce56ece32f246d3
-
SHA256
a7a6792fc50bd795e43a9db6c8575d2c609b9a6ff998b6a3a3d8094c95850a76
-
SHA512
796b8d4d63b3ceb4b3a0b062a8c8654b0c60ee0e590d2f7bb02be1fba7886a115c0c06421b0c6c82481f61f355062c9604098f5977ff4fafde289fee79dce2a6
-
SSDEEP
12288:0z/kaoDAqkOdmxluIOELtJbAb5gqJ1KZ0WvsxnUX63iz/XPvbG+O/r0G:pawkxxl/3Jk9emWvsxnUXzPjG+srT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37876b875b2236a0aaf8a7372a540970_NeikiAnalytics.exe
Files
-
37876b875b2236a0aaf8a7372a540970_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TechFle Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 699KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tnR2KO Size: 512B - Virtual size: 64B
Zephyr4 Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ