Behavioral task
behavioral1
Sample
511609b37a4c1df32ecf346ed0388caf5bbaf71a2c6cd4452ba50b37e5654f4f_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
511609b37a4c1df32ecf346ed0388caf5bbaf71a2c6cd4452ba50b37e5654f4f_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
511609b37a4c1df32ecf346ed0388caf5bbaf71a2c6cd4452ba50b37e5654f4f_NeikiAnalytics.exe
-
Size
72KB
-
MD5
44c0e8fb8e07854c09241f2457c35a30
-
SHA1
9b28543d8eb091bf716b0858e2c97e078b105521
-
SHA256
511609b37a4c1df32ecf346ed0388caf5bbaf71a2c6cd4452ba50b37e5654f4f
-
SHA512
9e97082d17478afd534d4106a5ac6241d751974edb3f3b5f186cc86ee506bc82cd2ea3e7935fb83e18907f9fa56c71ac5a4c7cdd7c8ff5e91fe0fef32852ac09
-
SSDEEP
1536:a7ZyqaFAlsr1++PJHJXFAIuZAIulJ/hJ/CpI:enaym3AIuZAIuupI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 511609b37a4c1df32ecf346ed0388caf5bbaf71a2c6cd4452ba50b37e5654f4f_NeikiAnalytics.exe
Files
-
511609b37a4c1df32ecf346ed0388caf5bbaf71a2c6cd4452ba50b37e5654f4f_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE