Behavioral task
behavioral1
Sample
6c7b90b9df157e0c53a5447c0a3d0381a7c54a130afc27b39d3a63ddb5949864_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6c7b90b9df157e0c53a5447c0a3d0381a7c54a130afc27b39d3a63ddb5949864_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6c7b90b9df157e0c53a5447c0a3d0381a7c54a130afc27b39d3a63ddb5949864_NeikiAnalytics.exe
-
Size
9.7MB
-
MD5
5c69adf7d798415d57685a95d5a84050
-
SHA1
fdafa482320ceed87b3f8e75237d5316b58a7230
-
SHA256
6c7b90b9df157e0c53a5447c0a3d0381a7c54a130afc27b39d3a63ddb5949864
-
SHA512
fe1a8e897c33638de1cde3175627ddc53400e7cefa833fd91fdf5750d66f80a961d64bf4e196b9d77ee503d8a7d62604d1115492303ab7140b3d918f9083f66b
-
SSDEEP
196608:hGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGj:K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c7b90b9df157e0c53a5447c0a3d0381a7c54a130afc27b39d3a63ddb5949864_NeikiAnalytics.exe
Files
-
6c7b90b9df157e0c53a5447c0a3d0381a7c54a130afc27b39d3a63ddb5949864_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE