Behavioral task
behavioral1
Sample
9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
e8acb1b4daced520e78256c9a333e300
-
SHA1
11145376b3fad615871732fda10c83ec2760f04b
-
SHA256
9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085
-
SHA512
51a046fc859e9c16abe308410664e24e3da5637ec0fe9134184d795fef1f0d508f75f2908805a398eaf3c4021e6bd5953e21ae838ae091b10a02f1e6495b04bb
-
SSDEEP
49152:5DFSkBKEK4Vkl9srv6sQJ3fp5jpVP4Yfc:5DFiEmfjJPXj7o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe
Files
-
9efbfef77eef3917036cb649412f1f255a31450421e9050b4fd002ea6025e085_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB