Behavioral task
behavioral1
Sample
230c97f35333509bbe3d2b663a9607c0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
230c97f35333509bbe3d2b663a9607c0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
230c97f35333509bbe3d2b663a9607c0_NeikiAnalytics.exe
-
Size
338KB
-
MD5
230c97f35333509bbe3d2b663a9607c0
-
SHA1
defb4685c32c0c7ba673db58c7c5e4fb79b7c373
-
SHA256
915a82cb0ea56eb6cd57d6bc87380f839e3690f073783dadeee21963225bcdff
-
SHA512
dffc079783b52c05aedf2da7c25530e18bafe2f4c413fefc7a600a4b0436ec061d6ae574dc37357b78d5a8da024255b3f38f32f4a4423318e3764d1c047c4bdb
-
SSDEEP
1536:sXK55REVmS+5Mh5Pnmla9RP7h4aDBgfYvswVn1Rmi+VDMwhfHCaECXmnUAjY:Hwca/PJlgwvbRmi+VDMwHBXIUAj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 230c97f35333509bbe3d2b663a9607c0_NeikiAnalytics.exe
Files
-
230c97f35333509bbe3d2b663a9607c0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 488KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 238KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE