Behavioral task
behavioral1
Sample
8ac845c0bb5bd64b6f8ac3add924a1a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ac845c0bb5bd64b6f8ac3add924a1a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8ac845c0bb5bd64b6f8ac3add924a1a0_NeikiAnalytics.exe
-
Size
268KB
-
MD5
8ac845c0bb5bd64b6f8ac3add924a1a0
-
SHA1
d07c05b59ff20f7918c0d8aa138df1fbbcce7442
-
SHA256
606f1d3e937c60c71d7bb331c1ded9d302467f116009470ec2e0276a738e7ccd
-
SHA512
49d95b8f61c962f1de002b430926e3a37464263c5a1f8c82132115d02e406fa8eb582531e8b941b6449895482bf6d26d8605bc1ba5ff2463058aa8cf61824fd8
-
SSDEEP
3072:+nymCAIuZAIuYSMjoqtMHfhffPfLIwuyKhr1nOj:JmCAIuZAIuDMVtM/5LIwuyKhr1nOj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ac845c0bb5bd64b6f8ac3add924a1a0_NeikiAnalytics.exe
Files
-
8ac845c0bb5bd64b6f8ac3add924a1a0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE