Behavioral task
behavioral1
Sample
1635775c4985afbe628a9557deb9b04b9fa0db4a71c2bbfa2af75e62ccbe86e0_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1635775c4985afbe628a9557deb9b04b9fa0db4a71c2bbfa2af75e62ccbe86e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1635775c4985afbe628a9557deb9b04b9fa0db4a71c2bbfa2af75e62ccbe86e0_NeikiAnalytics.exe
-
Size
71KB
-
MD5
8b6054182aa995f5526401fbebd923a0
-
SHA1
099b05fd475494ebb931a3e7178722e5550ec345
-
SHA256
1635775c4985afbe628a9557deb9b04b9fa0db4a71c2bbfa2af75e62ccbe86e0
-
SHA512
553bce1d2934ae856c80db0209ee8c742b026f6686dd444442159798f438d5777bed2ff8cbfcfac645e340df4d3b19f9b7a6cb6cfeb254aecf1f63feeb604c36
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8Q8/8RYj:fnyiQSoskRYj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1635775c4985afbe628a9557deb9b04b9fa0db4a71c2bbfa2af75e62ccbe86e0_NeikiAnalytics.exe
Files
-
1635775c4985afbe628a9557deb9b04b9fa0db4a71c2bbfa2af75e62ccbe86e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE