Behavioral task
behavioral1
Sample
0f8e70143d8a23a7663d7f9666b4ac70_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f8e70143d8a23a7663d7f9666b4ac70_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
0f8e70143d8a23a7663d7f9666b4ac70_NeikiAnalytics.exe
-
Size
297KB
-
MD5
0f8e70143d8a23a7663d7f9666b4ac70
-
SHA1
8101089a725d50050616afb1e630af8d27ea9d66
-
SHA256
4d4330c8d1869c8d749698f8629ba3645f4ef17fc5cd9778b7bc008748df9495
-
SHA512
e83830fdcd46f1de6227f777cc1edbfb4899b8b2a854ba17d7fd9ebc52a498e24aa20b4bc76e88d8f77a1be49ffb669629c889bdb3f84445089b6dcc07c979fa
-
SSDEEP
6144:KmCAIuZAIuDMVtM/sg9fAIuZAIuDMVtM/sguHU:IAIuZAIuOBglAIuZAIuOBguHU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8e70143d8a23a7663d7f9666b4ac70_NeikiAnalytics.exe
Files
-
0f8e70143d8a23a7663d7f9666b4ac70_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE