Behavioral task
behavioral1
Sample
2976325ef323446cf8843b4ebfd31cc3967f5554a7fd6892af4e1651c1cc5203_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2976325ef323446cf8843b4ebfd31cc3967f5554a7fd6892af4e1651c1cc5203_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
2976325ef323446cf8843b4ebfd31cc3967f5554a7fd6892af4e1651c1cc5203_NeikiAnalytics.exe
-
Size
67KB
-
MD5
08d15a625c0819aad9c79c6dfa0772a0
-
SHA1
40bd2a44d35ef60457347e288d16394ecbb08823
-
SHA256
2976325ef323446cf8843b4ebfd31cc3967f5554a7fd6892af4e1651c1cc5203
-
SHA512
0ad6d1b558dda5e5db64737c9d596050cd9ad2ee8425bf4f2eca322da6ed9e4296176a4326437d231064959af65e69af42b910b710e9a4a52363ea9da07b8499
-
SSDEEP
1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8M:fnyiQSo3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2976325ef323446cf8843b4ebfd31cc3967f5554a7fd6892af4e1651c1cc5203_NeikiAnalytics.exe
Files
-
2976325ef323446cf8843b4ebfd31cc3967f5554a7fd6892af4e1651c1cc5203_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE