Behavioral task
behavioral1
Sample
4270cee01b5624d674925825d4e7c4a0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4270cee01b5624d674925825d4e7c4a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4270cee01b5624d674925825d4e7c4a0_NeikiAnalytics.exe
-
Size
72KB
-
MD5
4270cee01b5624d674925825d4e7c4a0
-
SHA1
51b553cc93a01356acdd9da18ebf679a2409e3ff
-
SHA256
17937c3c94dd8f462d9916c566a02b2b8158d30fb7af0e1fa8121231f7f2de15
-
SHA512
41e531131cd965207b78022cebb1bba1e1f3d56c9a2dc89bb7fb8075a79d377b646baa8711c40c8aa536625ab819932fbdb0300ccb8519e52786864f71e30704
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/QbUkNdNm:fnyiQSobUkzM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4270cee01b5624d674925825d4e7c4a0_NeikiAnalytics.exe
Files
-
4270cee01b5624d674925825d4e7c4a0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE