Behavioral task
behavioral1
Sample
4a2b0773e7905967cbd27af44b98fa00_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4a2b0773e7905967cbd27af44b98fa00_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4a2b0773e7905967cbd27af44b98fa00_NeikiAnalytics.exe
-
Size
672KB
-
MD5
4a2b0773e7905967cbd27af44b98fa00
-
SHA1
8ae9e39805b170bac21cc0c5fd9c866394eb90ff
-
SHA256
119ba1157e4faf6344224f7d709ca7b80a05697ca6eb032afd85bb1ff509ee32
-
SHA512
bce3137411da541a8554c7c6714159e76d0a433c1bdbffc73935f596f9d60b163ed78675b279e17fc6bdede42a3b14baf3b894496ca1b826c53ad07ba820f192
-
SSDEEP
12288:uYV6MFMrX7qzuC3QHO9FQVHPF51jgcE7pI7r5UBzzhB1CZHxx9jLkc/VABjvrEHQ:NB9u9HGaVHoFCZX9z/VirEH7s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a2b0773e7905967cbd27af44b98fa00_NeikiAnalytics.exe
Files
-
4a2b0773e7905967cbd27af44b98fa00_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 768KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE