Behavioral task
behavioral1
Sample
8469529dcd288ed4c33e40ca1ad9191081c1e92e8379d65fb6e0e9485e179fd9_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8469529dcd288ed4c33e40ca1ad9191081c1e92e8379d65fb6e0e9485e179fd9_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8469529dcd288ed4c33e40ca1ad9191081c1e92e8379d65fb6e0e9485e179fd9_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
2db6fdb8254c50657e2966966e651c70
-
SHA1
f6fd96e8d6fb91f4ced9b4e57205b8d34265ce43
-
SHA256
8469529dcd288ed4c33e40ca1ad9191081c1e92e8379d65fb6e0e9485e179fd9
-
SHA512
c93f4e5c48ee05f3e1f487ccc4e43ffe1e7c1630203f00b8f881b56751b638148283b19a2304e00cff1ae21d3e5937abbe694ea8f3edf0d5d0c473692c5e1d25
-
SSDEEP
24576:lYZpHTf0/MCau+pwqmAwksuM5b114kHolme1Y/xnDoYAn9ujJnNo0cgS4HEBPjQj:GTwauHNuO1DIl/InDVAnQzT1S4HMjQj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8469529dcd288ed4c33e40ca1ad9191081c1e92e8379d65fb6e0e9485e179fd9_NeikiAnalytics.exe
Files
-
8469529dcd288ed4c33e40ca1ad9191081c1e92e8379d65fb6e0e9485e179fd9_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB