Behavioral task
behavioral1
Sample
48ada4ea554a572db61365ae645aa16a45cd8e231dbaebcc50aed179ffb41cf8_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
48ada4ea554a572db61365ae645aa16a45cd8e231dbaebcc50aed179ffb41cf8_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
48ada4ea554a572db61365ae645aa16a45cd8e231dbaebcc50aed179ffb41cf8_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
224b9b9962b43f1541c7d3d277ab90e0
-
SHA1
09b00cfc3bd5b9462df006d7639d780e8c0b3786
-
SHA256
48ada4ea554a572db61365ae645aa16a45cd8e231dbaebcc50aed179ffb41cf8
-
SHA512
de065aca1cb269fee1ea7b70248e8256fee1993674e9959d73c283c7220c3c2bb4a4de18f4c1cb0ed7fe93c3a3c2544c406f4fa284d723bb0c98762310adca7b
-
SSDEEP
24576:lHcbf/UU+PN1duYVfL+7p2rlqRdd3BM1/5yiL7ig/L9x04MSXcwdEobq8uGp2M70:d6h1kfL4pioRdd34/HPFzv5tEd6297
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48ada4ea554a572db61365ae645aa16a45cd8e231dbaebcc50aed179ffb41cf8_NeikiAnalytics.exe
Files
-
48ada4ea554a572db61365ae645aa16a45cd8e231dbaebcc50aed179ffb41cf8_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB