Behavioral task
behavioral1
Sample
4241fa5ed3fdcce37ce123ce6b0adff004f43ba11707b811d014cc2bc8b60891_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
4241fa5ed3fdcce37ce123ce6b0adff004f43ba11707b811d014cc2bc8b60891_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4241fa5ed3fdcce37ce123ce6b0adff004f43ba11707b811d014cc2bc8b60891_NeikiAnalytics.exe
-
Size
55KB
-
MD5
d52855be47d81aee62a817e28b6e5520
-
SHA1
0d4e1ba4dfdd68bb3417ddb537cb511548a9c347
-
SHA256
4241fa5ed3fdcce37ce123ce6b0adff004f43ba11707b811d014cc2bc8b60891
-
SHA512
8347819c53d552a46b9d9d45635a1b343a0f6f8d9afd12c69b915d4201c6b34f52437d4953bcdfd5bc176791734949dd8ed313b4168c076a014211f348016a08
-
SSDEEP
768:Y7Xezc/T6Zp14hyYtoVxYBY3705DXOQ69zbjlAAX5e9zt:Q6zqhyYtkYSqizbR9Xwzt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4241fa5ed3fdcce37ce123ce6b0adff004f43ba11707b811d014cc2bc8b60891_NeikiAnalytics.exe
Files
-
4241fa5ed3fdcce37ce123ce6b0adff004f43ba11707b811d014cc2bc8b60891_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE