Behavioral task
behavioral1
Sample
586d7262fc84735df9e2a60d9cbe3d4391d774728a21a2f3e8c55d89509e356d_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
586d7262fc84735df9e2a60d9cbe3d4391d774728a21a2f3e8c55d89509e356d_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
586d7262fc84735df9e2a60d9cbe3d4391d774728a21a2f3e8c55d89509e356d_NeikiAnalytics.exe
-
Size
67KB
-
MD5
dadc82bb27f7d37834eb4dc144df9900
-
SHA1
0979c8eaa3a81d5d5aea002b56347742a7671fa0
-
SHA256
586d7262fc84735df9e2a60d9cbe3d4391d774728a21a2f3e8c55d89509e356d
-
SHA512
5e1385bbc52413c480154656372b44f742e716132fdb8d4890b048bddcb8b1e62236aa456cb920dfa50f2bf7fab434afad9273d31a21981b499b77340f818f4d
-
SSDEEP
768:N+CLZoyIm5mn0000IFL8VlVJovlNHBvBPcFhl1WVe8gbxfxhM+g6he:N51tI/nIFLcJonhpPcjiebbxphM+C
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
586d7262fc84735df9e2a60d9cbe3d4391d774728a21a2f3e8c55d89509e356d_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Code Sign
4c:13:aa:cf:4e:57:6d:ad:49:25:55:05:51:92:f2:85:7d:12:e5:59Signer
Actual PE Digest4c:13:aa:cf:4e:57:6d:ad:49:25:55:05:51:92:f2:85:7d:12:e5:59Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 14KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE