Behavioral task
behavioral1
Sample
c449d6ede555cf966cec5fb424dd4460_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c449d6ede555cf966cec5fb424dd4460_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
c449d6ede555cf966cec5fb424dd4460_NeikiAnalytics.exe
-
Size
314KB
-
MD5
c449d6ede555cf966cec5fb424dd4460
-
SHA1
6bda2e1ff50015adb990b23536fe5d012274f20f
-
SHA256
a6d5e5374330ae97478d9cc1c8b39d212e4c63b9cdf56c03db394c7472b951ec
-
SHA512
4ebe2cd71ea8961ae47b7f66d26ae6290f733715c0a428997c871968ee406f3b8e4d0d692885d62873be8041c81dd1a82b7b556b7ff838063be343c706dbd645
-
SSDEEP
3072:7sgCullUQN7gsBh1LLQikygCullUQN7gsBh1L15:7LleK771Q/RleK7717
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c449d6ede555cf966cec5fb424dd4460_NeikiAnalytics.exe
Files
-
c449d6ede555cf966cec5fb424dd4460_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE