initgroupby
Behavioral task
behavioral1
Sample
9522999648a623a6aaf7b30ac15f400ff7f92b7ab1c7163b53da566f514729bb_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9522999648a623a6aaf7b30ac15f400ff7f92b7ab1c7163b53da566f514729bb_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
9522999648a623a6aaf7b30ac15f400ff7f92b7ab1c7163b53da566f514729bb_NeikiAnalytics.exe
-
Size
156KB
-
MD5
879e107d982dc1d5ca6b7581509815a0
-
SHA1
601fd12ad00b0de21738d66dd12b15326a31fed5
-
SHA256
9522999648a623a6aaf7b30ac15f400ff7f92b7ab1c7163b53da566f514729bb
-
SHA512
a4fdffb741bcb516d5981521abfdfda5c0bfe10d29f09311d5a87dbcb02b52f216c8f5313d8e6477b53dede702dd2a944287a71c97cd1ddeca73d417d47ca2c1
-
SSDEEP
3072:0mQEdEv08+/v04N15mzUjC8ZHtEOXp9WoKGbBP10RAt3EBLAFEWaFKKEm633waQm:YSEM8YJN15mzUjxZNtXLWoK2BPhtEBLI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9522999648a623a6aaf7b30ac15f400ff7f92b7ab1c7163b53da566f514729bb_NeikiAnalytics.exe
Files
-
9522999648a623a6aaf7b30ac15f400ff7f92b7ab1c7163b53da566f514729bb_NeikiAnalytics.exe.dll windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE