Behavioral task
behavioral1
Sample
cd2dfa6a9519ed085c6f01220c8ad2a0_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
cd2dfa6a9519ed085c6f01220c8ad2a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
cd2dfa6a9519ed085c6f01220c8ad2a0_NeikiAnalytics.exe
-
Size
174KB
-
MD5
cd2dfa6a9519ed085c6f01220c8ad2a0
-
SHA1
15704662ba04dfa7e79b508ee6008a896aff1ca3
-
SHA256
8adcc26a8d3de9a670a8af8d7334f435e42d7bd0a59ffc55c683b9e6d8c5c1ec
-
SHA512
72f8b6448140927a625d74ab53361aa8fa33accd2a1b06ca7af4b24502bc7f76a09cdcc98aeed6bb4e5be7f5d2a7d1e6f3f8dbb171652a6d23ff283157b3fc3b
-
SSDEEP
3072:fnyiQSohsUsxe+erZs1o8k1o8puIuCOzwIuCOzB+W+0JO2XKFbd0O:KiQSohsUsxe+e8IqzwIqzG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd2dfa6a9519ed085c6f01220c8ad2a0_NeikiAnalytics.exe
Files
-
cd2dfa6a9519ed085c6f01220c8ad2a0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE