Behavioral task
behavioral1
Sample
055e08942c7ba1855f5e6f20effada39109b087aaf5a69b6b8952f99568ba765_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
055e08942c7ba1855f5e6f20effada39109b087aaf5a69b6b8952f99568ba765_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
055e08942c7ba1855f5e6f20effada39109b087aaf5a69b6b8952f99568ba765_NeikiAnalytics.exe
-
Size
798KB
-
MD5
18f0e38c7c5457038be60e3ad55c4ad0
-
SHA1
d15fcaffad78a51af51c4a7646cb0fe997f77c28
-
SHA256
055e08942c7ba1855f5e6f20effada39109b087aaf5a69b6b8952f99568ba765
-
SHA512
08ce7c93e8f864eaed67036fef418cdcd765c081cfcb3c24704e773026444da90d1b685e82c6a7b928a8ac569db974c7b9e6a836f5556ca89f1a45a9d76838d7
-
SSDEEP
12288:7tKe6Zv23YLVFhBsC8iFHSs7xPY1f6HrSUsP6AVjANDRqWWWsbzCeOEbli7Vf:v6Zv2ivhBVnFys7xP86LXtqWJ/erG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 055e08942c7ba1855f5e6f20effada39109b087aaf5a69b6b8952f99568ba765_NeikiAnalytics.exe
Files
-
055e08942c7ba1855f5e6f20effada39109b087aaf5a69b6b8952f99568ba765_NeikiAnalytics.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE