Behavioral task
behavioral1
Sample
26dbe9c6142aef5e3bd89c5837ff3830_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
26dbe9c6142aef5e3bd89c5837ff3830_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
26dbe9c6142aef5e3bd89c5837ff3830_NeikiAnalytics.exe
-
Size
2.0MB
-
MD5
26dbe9c6142aef5e3bd89c5837ff3830
-
SHA1
c95076630b21b77ba6e7360369e0df3b4f3333d0
-
SHA256
fb16141ea139f6a09feb36cd3723598c875b112fafcfd82bdd2e5589c650458d
-
SHA512
d41b73a3ba3a39fa5da78633224fee1b9af13c81015df845c763dcc64af24a9c015d189296dae3c5c8d9090bd38c5abfd57308305d52bca77604777847c455e2
-
SSDEEP
49152:h3UR2w5aO12j3mVy88ukVy88uNVy88uDVy88uSVy88uzVy88uhVy88uJVy88uRVo:h36lE2Vy88ukVy88uNVy88uDVy88uSV2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26dbe9c6142aef5e3bd89c5837ff3830_NeikiAnalytics.exe
Files
-
26dbe9c6142aef5e3bd89c5837ff3830_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE