Behavioral task
behavioral1
Sample
87c5a48ea197b5afdb715fbd9aa4adf0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87c5a48ea197b5afdb715fbd9aa4adf0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
87c5a48ea197b5afdb715fbd9aa4adf0_NeikiAnalytics.exe
-
Size
87KB
-
MD5
87c5a48ea197b5afdb715fbd9aa4adf0
-
SHA1
17f51f4dd58d47988a1a06b7b2e601f7b2709748
-
SHA256
3e95d91619d16b8d8ddb132a5c9deda0c33201f05d983bd27d5906583bfb2a81
-
SHA512
be7d33d6b7495aa74505ac0edef75959fb8e9fec3e3ea79c2a46e9c24f39ca9ddd601199bea1c669824b87da4f7bf1030002f7c68c7ee9b7058500d3c415ec89
-
SSDEEP
1536:TYjIyeC1eUfKjkhBYJ7mTCbqODiC1ZsyHZK0FjlqsS5eHyG9LU3YG8nxb:0dEUfKj8BYbDiC1ZTK7sxtLUIGG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87c5a48ea197b5afdb715fbd9aa4adf0_NeikiAnalytics.exe
Files
-
87c5a48ea197b5afdb715fbd9aa4adf0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 496KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ