Behavioral task
behavioral1
Sample
8ee906d6a3101e30db9c88d3ac229cb0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8ee906d6a3101e30db9c88d3ac229cb0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8ee906d6a3101e30db9c88d3ac229cb0_NeikiAnalytics.exe
-
Size
40KB
-
MD5
8ee906d6a3101e30db9c88d3ac229cb0
-
SHA1
b966c2ae2e337f0f6a339861aa7bad1c7bade3a9
-
SHA256
c4e4e7644bc8ac166eb82507a3a528505f2370b82dc0b68999b0795dc4f61bbe
-
SHA512
784d3037eb2497ce441cb018f442209c06e3b98320f3ee421467a3a4f2ab07e08586c7e20abcbcdba9a6ea75f5d56c6bcc62c069d82c3f901879f952f780f452
-
SSDEEP
768:C6qh5nWLQF/NwwCWNS50BQifgvYnbcuyD7UG:C665WLiVwtypfgvYnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ee906d6a3101e30db9c88d3ac229cb0_NeikiAnalytics.exe
Files
-
8ee906d6a3101e30db9c88d3ac229cb0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE