Behavioral task
behavioral1
Sample
2e8d6dfb6c45b1631e08bbceedaf34b0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2e8d6dfb6c45b1631e08bbceedaf34b0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2e8d6dfb6c45b1631e08bbceedaf34b0_NeikiAnalytics.exe
-
Size
358KB
-
MD5
2e8d6dfb6c45b1631e08bbceedaf34b0
-
SHA1
a36c58ccbd3e0ddb17a9f8253a3c3ce504f28dda
-
SHA256
e53a6af1b9d826fdd32e219d2b21acd8b3094db90ba089c40e25f5c96d9be0e9
-
SHA512
127cbaddf8915a6d103b5526a7608bf5c8d681e9bb2a12f6818a855512ace9f3d806d19dcb089ab2a664b444e8d4d8d39aff88834c77d62ba8299c0c4273be19
-
SSDEEP
6144:KiQSo1EZGtKgZGtK/CAIuZAIu4QSo1EZGtKgZGtK/CAIuZAIu0PxPu:VQtyZGtKgZGtK/CAIuZAIu4QtyZGtKgQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e8d6dfb6c45b1631e08bbceedaf34b0_NeikiAnalytics.exe
Files
-
2e8d6dfb6c45b1631e08bbceedaf34b0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE