Behavioral task
behavioral1
Sample
f9aeb807528a3825628c25dc42a091e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f9aeb807528a3825628c25dc42a091e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
f9aeb807528a3825628c25dc42a091e0_NeikiAnalytics.exe
-
Size
56KB
-
MD5
f9aeb807528a3825628c25dc42a091e0
-
SHA1
4f8b3852c90ccebabcad972e1025b3d920f63bfd
-
SHA256
561765aafe80790dc97a42b03d334b460d43052d02f5f2142398682c235cb8ed
-
SHA512
6099e9396704883ddb42672dcf4cc7715e24946723e7aad1e02fb512f1b7b49d04ae4f9ca2387ef860d9bc7c94145b42cc1622bc6dd831a745795d3acd4e18f5
-
SSDEEP
768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2XpfsU2s:r9l+W8xFt6sh7iQroCoRB0u0sU2s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9aeb807528a3825628c25dc42a091e0_NeikiAnalytics.exe
Files
-
f9aeb807528a3825628c25dc42a091e0_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE