Behavioral task
behavioral1
Sample
af4296c5a4642690ff61c77153ba0450256bb1517e0dba01311377a5a8a1a379_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
af4296c5a4642690ff61c77153ba0450256bb1517e0dba01311377a5a8a1a379_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
af4296c5a4642690ff61c77153ba0450256bb1517e0dba01311377a5a8a1a379_NeikiAnalytics.exe
-
Size
167KB
-
MD5
2425e99a693bcaa68838ccbc78eb2a50
-
SHA1
6be422b26237a06c6f622f21529d25e00b4e07bb
-
SHA256
af4296c5a4642690ff61c77153ba0450256bb1517e0dba01311377a5a8a1a379
-
SHA512
1aaf24eaddc9b15b2d479d00419233879e411c8b20e8ba8977cda03dc8a4fd315ce548800ded40119d3e39f98a2f122357113a92f2352722f45156cb4d35185b
-
SSDEEP
1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8zx3Y3hx+fsio5UxKzWZ64+A8C4K:enaypQSo6VEio5Ua4Nj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af4296c5a4642690ff61c77153ba0450256bb1517e0dba01311377a5a8a1a379_NeikiAnalytics.exe
Files
-
af4296c5a4642690ff61c77153ba0450256bb1517e0dba01311377a5a8a1a379_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE