Behavioral task
behavioral1
Sample
254837e96634c1403c55f18f6e6e07a4f276f681c021a9e896bcae0999d6c616_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
254837e96634c1403c55f18f6e6e07a4f276f681c021a9e896bcae0999d6c616_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
254837e96634c1403c55f18f6e6e07a4f276f681c021a9e896bcae0999d6c616_NeikiAnalytics.exe
-
Size
134KB
-
MD5
1f405bfd977aa511e1a7252d8d74b8c0
-
SHA1
3356ceb6a2caf171248545f0d2944df7d4b99376
-
SHA256
254837e96634c1403c55f18f6e6e07a4f276f681c021a9e896bcae0999d6c616
-
SHA512
c9567ade2e6e14262935f4cef454b3b9f46485260e878c5e2c5817972a589e57f310f468e5511bf0ef6a6dd45f3d30432af2b572daf057d19e044655f22e65a4
-
SSDEEP
1536:rF0AJELopHG9aa+9qX3apJzAKWYr0v7ioy6paK2AZqMIK7aGZh38Qy:riAyLN9aa+9U2rW1ip6pr2At7NZuQy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 254837e96634c1403c55f18f6e6e07a4f276f681c021a9e896bcae0999d6c616_NeikiAnalytics.exe
Files
-
254837e96634c1403c55f18f6e6e07a4f276f681c021a9e896bcae0999d6c616_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE