Behavioral task
behavioral1
Sample
1d3083536a474a240f9f8c941ab45b70_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1d3083536a474a240f9f8c941ab45b70_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1d3083536a474a240f9f8c941ab45b70_NeikiAnalytics.exe
-
Size
236KB
-
MD5
1d3083536a474a240f9f8c941ab45b70
-
SHA1
18c96d367c4c07adb414536528668ddc9b91fc66
-
SHA256
8b04f896f6491d74d5234f1b65654a2140ef566fe4f42490611d147c49822777
-
SHA512
1627058062e29b76d24a519ee78bcc3589e7fd4e45f252c030c9f98c84b1af529954ec979942ee84368a5ad51ee71e5cf7bf4e8a395e6de85d27664d0717247f
-
SSDEEP
3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuYch93g+gfFpsJOfFpsJh:JiQSo1EZGtKgZGtK/CAIuZAIuH3N
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d3083536a474a240f9f8c941ab45b70_NeikiAnalytics.exe
Files
-
1d3083536a474a240f9f8c941ab45b70_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE