Behavioral task
behavioral1
Sample
15087b5d8cc80ff8ba666419a248fb60_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
15087b5d8cc80ff8ba666419a248fb60_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
15087b5d8cc80ff8ba666419a248fb60_NeikiAnalytics.exe
-
Size
87KB
-
MD5
15087b5d8cc80ff8ba666419a248fb60
-
SHA1
c58c924316b1daf95432faa3ab40bc11d70b1e4f
-
SHA256
de0dbabbfc00afd7e4a8e4273e5ba38e270ade79ba958cc0c19d789485728539
-
SHA512
cc5d808e83c52a5925765ef833655057ad3a771e3a042655981903fa65697fae6a5d332d2e42693aa50d718eaa8cb1c87a4f7c88eb6dddcaae80abf936ca0c41
-
SSDEEP
768:DKPPQYaN67hQCGVX3EHvazXwLlqiSoTjnekrjsCTOWnFc6nWWExiBA/A3GTkK:DuhOzXmchkECmQAD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15087b5d8cc80ff8ba666419a248fb60_NeikiAnalytics.exe
Files
-
15087b5d8cc80ff8ba666419a248fb60_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 743B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE