Behavioral task
behavioral1
Sample
441c6d22abfb497af0356ff5808ba3e0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
441c6d22abfb497af0356ff5808ba3e0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
441c6d22abfb497af0356ff5808ba3e0_NeikiAnalytics.exe
-
Size
2.7MB
-
MD5
441c6d22abfb497af0356ff5808ba3e0
-
SHA1
56713cea3f5cd52217d4be4ff9624a3e823f8e54
-
SHA256
ce666b205dfd0940e2046d4333d898c998b48fb0255d5a3090c12f1c0bcb5e1b
-
SHA512
1d226e8f5e43a50368f50ee63a2aad6a0925541ccd62af7548be5b3e944ab1dbd55aeaa6d1fca5e6ca0e0dde4fe17263d994c6db0b6b6134ac6311453f9ea748
-
SSDEEP
24576:AITdio+q2/foAv+IEQjg1cghT/CzIR/VCyIIpAdSezqNjVRogS31/1p/XT/mCIJx:A4+q0+IE9cQVC4pAdr8jVRKn/URPEE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 441c6d22abfb497af0356ff5808ba3e0_NeikiAnalytics.exe
Files
-
441c6d22abfb497af0356ff5808ba3e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE