Behavioral task
behavioral1
Sample
5318cf06e2b6faf72ff60333e5adcb50_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5318cf06e2b6faf72ff60333e5adcb50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5318cf06e2b6faf72ff60333e5adcb50_NeikiAnalytics.exe
-
Size
91KB
-
MD5
5318cf06e2b6faf72ff60333e5adcb50
-
SHA1
f57a55971aa98f6d7d8f83dbefe1ab294d7f2ea3
-
SHA256
0fe65dea9cdea27b8c8034b3e838066b4fb4018184056a86bd6ac6d6568ee5a4
-
SHA512
886dadff86985662f5b0676a2e522e185d64aaaa310998762e7a05a3e8358816dc3a4eb7f8f72c9988a1e2b30fee1f840b7030eecc4ecd0f4cf2c56149b948a1
-
SSDEEP
1536:ERsjdf1aM67v32Z9x5nouy8VT2Rsjdf1aM67v32Z9x5nouy8VTU:EOaHv3YpoutN2OaHv3YpoutNU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5318cf06e2b6faf72ff60333e5adcb50_NeikiAnalytics.exe
Files
-
5318cf06e2b6faf72ff60333e5adcb50_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE