Behavioral task
behavioral1
Sample
31def111d18212232b5be2ebb8b74d20_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
31def111d18212232b5be2ebb8b74d20_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
31def111d18212232b5be2ebb8b74d20_NeikiAnalytics.exe
-
Size
134KB
-
MD5
31def111d18212232b5be2ebb8b74d20
-
SHA1
0b571f8d963efc814ad3bb0d5e38bd5fe81f7324
-
SHA256
39aedd824d99a815d0e5ce2dc47ddf8fb9b340cb1a5ff7e4dd4839b0b60b9444
-
SHA512
9f34bb760da588a89bbbe7efce1c78834cea7be966ab981f98f4b7db48a86c20d40dbf518b40a0f1ed1f71d8edb4e2c41cec7382c899dcd6f8087d4b13d2c27b
-
SSDEEP
1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SO6:YfU/WF6QMauSuiWNi9eNOl0007NZIO6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31def111d18212232b5be2ebb8b74d20_NeikiAnalytics.exe
Files
-
31def111d18212232b5be2ebb8b74d20_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE