Behavioral task
behavioral1
Sample
3a227b6ee8ae9d61560711ba217344b0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3a227b6ee8ae9d61560711ba217344b0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
3a227b6ee8ae9d61560711ba217344b0_NeikiAnalytics.exe
-
Size
293KB
-
MD5
3a227b6ee8ae9d61560711ba217344b0
-
SHA1
4cb9795d8bb2680c0537783f0d454a251cec1dbd
-
SHA256
dc8bf804fcdd7387ee3b1038a091993ab622d3684b91dc1dc0d2539e113668b2
-
SHA512
4c4c0dfb1ae853cac88f82abd76561c9ef0197194fdebe1ead0624d2db712487a982ecc05a299d697415df427d166a4fa191275a5801aa596e968e78b6693792
-
SSDEEP
6144:g750HizPy7n+g47wSAr2QxMcnpjRBM8Aat6E5PB0beIwa2pX8EIHBZrfxoS4iJH:Diz+n87tArhxVjVAA6aPBwSXrk7rJoS9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a227b6ee8ae9d61560711ba217344b0_NeikiAnalytics.exe
Files
-
3a227b6ee8ae9d61560711ba217344b0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE