Behavioral task
behavioral1
Sample
08025ab3396596b8c984207e2ca0736d65741edea8434227982159f6c68eb2e8_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08025ab3396596b8c984207e2ca0736d65741edea8434227982159f6c68eb2e8_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
08025ab3396596b8c984207e2ca0736d65741edea8434227982159f6c68eb2e8_NeikiAnalytics.exe
-
Size
70KB
-
MD5
434144f87951f4c7543bdff641e1b350
-
SHA1
f8aca6484967491afb8a69f51a293cf8e376edea
-
SHA256
08025ab3396596b8c984207e2ca0736d65741edea8434227982159f6c68eb2e8
-
SHA512
338aa95f2e4c085c722ee71cbc1724dea8ad8d7003e32198c212bfe40f731811c8cc66fae2e99dc88712c6544ec0cc6986180c1be0b206c57b9fd64efa1beb75
-
SSDEEP
768:lYCZuTEvv6cHZX/IkRDzPsnib67eqkhUZZZ3DI5I:lFj3RDOib6aqkSZZZ3EI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08025ab3396596b8c984207e2ca0736d65741edea8434227982159f6c68eb2e8_NeikiAnalytics.exe
Files
-
08025ab3396596b8c984207e2ca0736d65741edea8434227982159f6c68eb2e8_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE