Behavioral task
behavioral1
Sample
39a9d0c1ec1bc7a1cf18af2d6cb3fe20_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39a9d0c1ec1bc7a1cf18af2d6cb3fe20_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
39a9d0c1ec1bc7a1cf18af2d6cb3fe20_NeikiAnalytics.exe
-
Size
17KB
-
MD5
39a9d0c1ec1bc7a1cf18af2d6cb3fe20
-
SHA1
d58ded21454b7d0235bff10d9d70af04bbc84f23
-
SHA256
118c463aee853035eb185b6fae879b033a52fe127b2b5f4105968acce1b0e065
-
SHA512
9042eb71821340230c614d909116bdca764b700c43e75c422facd41a9e3963ac04869a3a0236b0fc8bf9abeec5222d54a5c9a95090f8c80ffcdfb393c82814db
-
SSDEEP
96:qjUvrYH3t6jBIamJmPdz336NC+98Nxh4ztuaBH2rYtILNlft7Tq+a:CUM2B19PdzaJ8ND4huaBWrYONlFvfa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39a9d0c1ec1bc7a1cf18af2d6cb3fe20_NeikiAnalytics.exe
Files
-
39a9d0c1ec1bc7a1cf18af2d6cb3fe20_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 265B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE