Behavioral task
behavioral1
Sample
6f91d9811e81f099a2fc23280d11765c49c9f9d9d1ca175185f23cae989d1f2d_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6f91d9811e81f099a2fc23280d11765c49c9f9d9d1ca175185f23cae989d1f2d_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6f91d9811e81f099a2fc23280d11765c49c9f9d9d1ca175185f23cae989d1f2d_NeikiAnalytics.exe
-
Size
20KB
-
MD5
041c8c00000985b11800f0e1f42d7490
-
SHA1
9bf8f9cdbc8c1ebedba8ff9c843c375a2d0bd9d4
-
SHA256
6f91d9811e81f099a2fc23280d11765c49c9f9d9d1ca175185f23cae989d1f2d
-
SHA512
336e2ff16a3e98ea97969e85dfc3245c3d6588b45768a8263c9064fc9f18612311129c1cc517d7af966671f19d16c94a2f381fb25d0587dd1e600162486379ff
-
SSDEEP
192:VjUWFh4fvYGIQnsA6psQXFaNJhLkwcud2DH9VwGfct1hM5EKUn:9KE7pXaNJawcudoD7U7S5Evn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f91d9811e81f099a2fc23280d11765c49c9f9d9d1ca175185f23cae989d1f2d_NeikiAnalytics.exe
Files
-
6f91d9811e81f099a2fc23280d11765c49c9f9d9d1ca175185f23cae989d1f2d_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE