Behavioral task
behavioral1
Sample
01fabe4f64d809b3346669e3b0b882d0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
01fabe4f64d809b3346669e3b0b882d0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
01fabe4f64d809b3346669e3b0b882d0_NeikiAnalytics.exe
-
Size
253KB
-
MD5
01fabe4f64d809b3346669e3b0b882d0
-
SHA1
bb9a5572dec510ff1c2e5aa6a13b78297361923e
-
SHA256
2fb1d7b70eb6fd7237a2f83f89706e1187e9120c206a9903f355f05e1cb6a36d
-
SHA512
a1c1e5f6456b7be6204c56d8e1c1fac9fcdf4577b446387e4985e868b5bf41a01c6c755650290f805ac1933cb5c2ec4b0e631a2f95936e14a45f4e91d00551c2
-
SSDEEP
3072:fnymCAIuZAIuYSMjoqtMHfhftfAIuZAIuYSMjoqtMHfhfC:KmCAIuZAIuDMVtM/bfAIuZAIuDMVtM/I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01fabe4f64d809b3346669e3b0b882d0_NeikiAnalytics.exe
Files
-
01fabe4f64d809b3346669e3b0b882d0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE