Behavioral task
behavioral1
Sample
2681d5b274fb09b90ebd4f2c2237bacf8a0635231061d5a440edd49ce2db5825_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2681d5b274fb09b90ebd4f2c2237bacf8a0635231061d5a440edd49ce2db5825_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
2681d5b274fb09b90ebd4f2c2237bacf8a0635231061d5a440edd49ce2db5825_NeikiAnalytics.exe
-
Size
8KB
-
MD5
da8f77ce87991118874a3000a9e9b330
-
SHA1
a2d182f85d88b93e5ff33232160ef18878b81ebe
-
SHA256
2681d5b274fb09b90ebd4f2c2237bacf8a0635231061d5a440edd49ce2db5825
-
SHA512
dd72fcdb64e0ce8f7c7faaf035e49ab1b01953378b00dae229dd64080e71c547718236e58f4381c92d8068476b1081f278d41117194ee95c076bcec46dd8aca8
-
SSDEEP
192:RUOmJkTmn/C4dor2SHL8y+zZMgEwTzmrC:UZ/C4Kr2SIbzZPzmu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2681d5b274fb09b90ebd4f2c2237bacf8a0635231061d5a440edd49ce2db5825_NeikiAnalytics.exe
Files
-
2681d5b274fb09b90ebd4f2c2237bacf8a0635231061d5a440edd49ce2db5825_NeikiAnalytics.exe.dll windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE