Behavioral task
behavioral1
Sample
3444320d3902220c7d0d2bfba1dc7f8dd06c9d6048df5ba050c147d0d73d3fce_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3444320d3902220c7d0d2bfba1dc7f8dd06c9d6048df5ba050c147d0d73d3fce_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
3444320d3902220c7d0d2bfba1dc7f8dd06c9d6048df5ba050c147d0d73d3fce_NeikiAnalytics.exe
-
Size
134KB
-
MD5
2c33c4d6bf108d681f84bf0b03154b70
-
SHA1
13e911a63ebaf23b2181c4b3c2406862a0f3ebdc
-
SHA256
3444320d3902220c7d0d2bfba1dc7f8dd06c9d6048df5ba050c147d0d73d3fce
-
SHA512
85bcb51fd00264bc14660ca04fdd653dec3c94ffe493e808d6d9aabe6a250961887284e5c990dc902042119472f93052ce361e73450e9c03d4082f04a38f4ca8
-
SSDEEP
1536:rF0AJELopHG9aa+9qX3apJzAKWYr0v7ioy6paK2AZqMIK7aGZh38QVE:riAyLN9aa+9U2rW1ip6pr2At7NZuQVE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3444320d3902220c7d0d2bfba1dc7f8dd06c9d6048df5ba050c147d0d73d3fce_NeikiAnalytics.exe
Files
-
3444320d3902220c7d0d2bfba1dc7f8dd06c9d6048df5ba050c147d0d73d3fce_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE