Behavioral task
behavioral1
Sample
3ba8df6f1b53d6cc197a6518de55c570_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
3ba8df6f1b53d6cc197a6518de55c570_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3ba8df6f1b53d6cc197a6518de55c570_NeikiAnalytics.exe
-
Size
117KB
-
MD5
3ba8df6f1b53d6cc197a6518de55c570
-
SHA1
c5f1615d12a55b18a5951f94ed58b08b4930a0a6
-
SHA256
c7eec30a2172258c209fd7f363f401de2010ab33a427abc3160d605678e009da
-
SHA512
bf8d53534d354827d0bfceb8cb251e11e0ee575f00f09e0df4a02eba537c2a5782fbc2fc22451d5954ba43c80bcc8025b01ba28d6bfde5907ea33f31f70b39ff
-
SSDEEP
1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUs18/8DTWn1++PJHJXA/OsIZfzc3/g:+nyiQSohsUsOkHQSohsUs+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ba8df6f1b53d6cc197a6518de55c570_NeikiAnalytics.exe
Files
-
3ba8df6f1b53d6cc197a6518de55c570_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE