Behavioral task
behavioral1
Sample
0208d630e6e6b711448e4ef5c3f61a70_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0208d630e6e6b711448e4ef5c3f61a70_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0208d630e6e6b711448e4ef5c3f61a70_NeikiAnalytics.exe
-
Size
221KB
-
MD5
0208d630e6e6b711448e4ef5c3f61a70
-
SHA1
acea05132db7a8a158fda1e690341da0a048d221
-
SHA256
1b7de0adf9d9afec5f435f6278a43488e3e33722b454d9a385b54c064811fa32
-
SHA512
41299b701a429ed006d9f436f802136ca08d03c036aaf9e996fa50b5857899b406beedbebcda98a2a5155e36689c7a50795b9c4731c11d4129c0ee9eaa3e1a9d
-
SSDEEP
3072:fnymCAIuZAIuYSMjoqtMHfhfagL9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRr6:KmCAIuZAIuDMVtM/sgL9iMGsSaOyiH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0208d630e6e6b711448e4ef5c3f61a70_NeikiAnalytics.exe
Files
-
0208d630e6e6b711448e4ef5c3f61a70_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE