Behavioral task
behavioral1
Sample
5b9702e733984b54020fb1d37a942370_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5b9702e733984b54020fb1d37a942370_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
5b9702e733984b54020fb1d37a942370_NeikiAnalytics.exe
-
Size
1.1MB
-
MD5
5b9702e733984b54020fb1d37a942370
-
SHA1
08dd81376062e9df46c368d2881507ca9d77db2e
-
SHA256
d87b4e98308e642ac81763ce07ce149d57884b4fbd3f13902f52dc0a8b5d60ff
-
SHA512
bfb306f030ba4ed706b0e6b0f9df1ba042f10a4600d7bc4a0a0b774bbb9ae5209dd90575a41e1f58d09033f5166eed4a64b44fc1255deffd03686764e44f1157
-
SSDEEP
24576:AIIBwaz5AMQ4EiVHT1U+4i2p+d6aUgjmMH+PnYPlZ9FcEu8Lo+pzFjOPsoqhBo6w:AtTFuM0UfH7qE1o+pRSPTqro51O0SmbF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b9702e733984b54020fb1d37a942370_NeikiAnalytics.exe
Files
-
5b9702e733984b54020fb1d37a942370_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE