Behavioral task
behavioral1
Sample
2e0b1d35ca91054f1148f607cdfed780_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2e0b1d35ca91054f1148f607cdfed780_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
2e0b1d35ca91054f1148f607cdfed780_NeikiAnalytics.exe
-
Size
675KB
-
MD5
2e0b1d35ca91054f1148f607cdfed780
-
SHA1
275b651e5244df1a5d9882b22c877110b62d2885
-
SHA256
2dc60f5d90326a90528141b7e74f389cfaee43c76fc249e3c4c00cf6b1ddeb29
-
SHA512
e2d62092b12bff9460df867b0d7b2d3e0f9520c1ced3079187ed7ed967a5f618c5c692e1873c243d4c04b9a802ca21697ca4924f2a41168f68f7b2c5bfa739ad
-
SSDEEP
12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6HrSUsP6AVjANDRqH5AO98GuRBo+:v6Zv2ivhBVnFys7xP86LXtqZEGuRC+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e0b1d35ca91054f1148f607cdfed780_NeikiAnalytics.exe
Files
-
2e0b1d35ca91054f1148f607cdfed780_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE