Behavioral task
behavioral1
Sample
9d446301a514a218403825395509b6f0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9d446301a514a218403825395509b6f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
9d446301a514a218403825395509b6f0_NeikiAnalytics.exe
-
Size
12KB
-
MD5
9d446301a514a218403825395509b6f0
-
SHA1
2eb0c8b8271edda41dcc0c46c11af1aaf39c4b7d
-
SHA256
1d0689ecea346d7072833ea2972576d9cedc52fa0b66783778f6cae3e868f8d9
-
SHA512
5ffc7a240945b6323662c1cb03d0638a90e45ed495f5cf2c2fd23f5b9a78ec899faa0e69e3f66243f5c0f6c6dae91b306af54e082d635cff4b190ae83d8af384
-
SSDEEP
192:2wUWFh4fvYGIQnsA6psQJFaNJhLkwcud2DH9VwGfctQEAE5Ex:zKE7pBaNJawcudoD7Uj5Ex
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d446301a514a218403825395509b6f0_NeikiAnalytics.exe
Files
-
9d446301a514a218403825395509b6f0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE