Behavioral task
behavioral1
Sample
48a083721a2bcd8474384ffa01a9f413f34a288fcee29d83c2d207134f169343_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
48a083721a2bcd8474384ffa01a9f413f34a288fcee29d83c2d207134f169343_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
48a083721a2bcd8474384ffa01a9f413f34a288fcee29d83c2d207134f169343_NeikiAnalytics.exe
-
Size
65KB
-
MD5
63ec4e590d3cd18e4ca92820d5dd0c00
-
SHA1
8042927068dede01faa7a8e9859a0f6f9080ccd7
-
SHA256
48a083721a2bcd8474384ffa01a9f413f34a288fcee29d83c2d207134f169343
-
SHA512
d1fd38c0bf7237e533d01927242dad6363e91a3a6d3850aae850cb91e0b75094ea7bf8cf2628deca8782f75dbfddb6113662b9224624eb064f3c8cdbf3d6ad4b
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjyJJCBT37CPKKdJJ1EXBwzEXBwxjM2jMbtE:V7Zf/FAxTWoJJoTW7JJfI2IbtE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48a083721a2bcd8474384ffa01a9f413f34a288fcee29d83c2d207134f169343_NeikiAnalytics.exe
Files
-
48a083721a2bcd8474384ffa01a9f413f34a288fcee29d83c2d207134f169343_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE