Behavioral task
behavioral1
Sample
3b6e8fd70ca7bca1e7bc4abd75b095d0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3b6e8fd70ca7bca1e7bc4abd75b095d0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3b6e8fd70ca7bca1e7bc4abd75b095d0_NeikiAnalytics.exe
-
Size
80KB
-
MD5
3b6e8fd70ca7bca1e7bc4abd75b095d0
-
SHA1
17270fe304900d4e723fe7b2e2262789f1094ba8
-
SHA256
0fdabcaaed49f09c71ec53062ee12a7d1f0267aaa1474ce83dec395b687d2176
-
SHA512
84a17207b32f5ea6058e084a04fe0c52f383e083af03d7a8fdde51bf42cedac92e6e43b72899c2aa11f443ba6695c32ae83522967c63ba0c8b21a6945c30611e
-
SSDEEP
1536:cUbAD58qmcOs38EZ0VTqhG5f8GoG0uCd6byBEVcyVVe27xDoQWo0WJD:7+8qjOsZZwMGiy0uCdUyuVpVtDx
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b6e8fd70ca7bca1e7bc4abd75b095d0_NeikiAnalytics.exe
Files
-
3b6e8fd70ca7bca1e7bc4abd75b095d0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 70KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE