Behavioral task
behavioral1
Sample
3df18a82ee51b2f00f81a8cfca056650_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3df18a82ee51b2f00f81a8cfca056650_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3df18a82ee51b2f00f81a8cfca056650_NeikiAnalytics.exe
-
Size
136KB
-
MD5
3df18a82ee51b2f00f81a8cfca056650
-
SHA1
1c8a072a02ee2ae669f2042efd5299b370d6fd9d
-
SHA256
12f178665d27f6de04c4ee5b63f13fbdca5a9455beafd35b4ef5e9d6525bd9c9
-
SHA512
1c1bc97570f273054c35516b69947d7c1d425dd5059e70285990c9ea3ac51c0e1af3cd7fecbbad1fdf9606c0d7752bf189f0f3a40e490f9c482d1ac013e6f40f
-
SSDEEP
1536:67Zf/FAxTWY1++PJHJXA/OsIZ2Ek8NhoYyRvaLNFqRprAqnMEosmE+w+dnw+dnE1:+nyilFXwk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3df18a82ee51b2f00f81a8cfca056650_NeikiAnalytics.exe
Files
-
3df18a82ee51b2f00f81a8cfca056650_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE