Behavioral task
behavioral1
Sample
26abfab1340d867727c1c3fdb1e6c971a3bacae0d79b4232f93e5dbc1bfe32b9_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
26abfab1340d867727c1c3fdb1e6c971a3bacae0d79b4232f93e5dbc1bfe32b9_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
26abfab1340d867727c1c3fdb1e6c971a3bacae0d79b4232f93e5dbc1bfe32b9_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
d548b2aeeb799f32ba837dc3da365030
-
SHA1
2a14732605788a8faaf69a2afb88611312352f40
-
SHA256
26abfab1340d867727c1c3fdb1e6c971a3bacae0d79b4232f93e5dbc1bfe32b9
-
SHA512
d4dd482aa225a39e0c8f8c73d19abf0e0993a2c80d04a9219e445f85660be38220159da2d06ceb5f0c4306b04ce6613404c76bd8fc43e16d18f3a56b3a8985b8
-
SSDEEP
24576:lsxhcwLcPOgfn6QYNvnAdB6P4cKOf1iY5Y4YP7kuMtm7R4jsP28XSed3:wcEc2QY5eBe4cl1Z5Yet34jXB3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26abfab1340d867727c1c3fdb1e6c971a3bacae0d79b4232f93e5dbc1bfe32b9_NeikiAnalytics.exe
Files
-
26abfab1340d867727c1c3fdb1e6c971a3bacae0d79b4232f93e5dbc1bfe32b9_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB