Behavioral task
behavioral1
Sample
e3629ab807936646db368ca008977850_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e3629ab807936646db368ca008977850_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
e3629ab807936646db368ca008977850_NeikiAnalytics.exe
-
Size
83KB
-
MD5
e3629ab807936646db368ca008977850
-
SHA1
d12785f90e0505143f4559188cc59220c51bf4b9
-
SHA256
dd84b2b1faf55b0feb59c2e4f87c191f0197ad980d2e070281ee6faeccda61ca
-
SHA512
98467e7a27e168df68e73c65d2541fa0f04b0b54e76f8e540cdc1b31cc30f66c231188d30130979ac811ceddc843f17a3c8a21c9af0c9df29739215963119bbd
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsJOLK2UaiN+UaiNn:fnyiQSohsUsUK2UabUao
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3629ab807936646db368ca008977850_NeikiAnalytics.exe
Files
-
e3629ab807936646db368ca008977850_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE