Behavioral task
behavioral1
Sample
22093cfa7762330acd024087d83d3110_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
22093cfa7762330acd024087d83d3110_NeikiAnalytics
-
Size
177KB
-
MD5
22093cfa7762330acd024087d83d3110
-
SHA1
1d8358f76e36c30e153097a9da0fe7b49fc243ad
-
SHA256
4291db1066b1141b11fec9d5053ad53130d30d62ee990e4a09f3a70de80736bb
-
SHA512
826cb1a9416d632190a5b594d736dd99f96ec48f7b26dafdcb1c754d1990e1a8f9762aa8112e1db697886c68d3840bb21d4df23c280ea3d4bea91caad611766b
-
SSDEEP
1536:HIN9E8RW2ZgACLU2/NpWb3owdFLVa7h5s3ePOHd265dCKsp04mDmr2U1ml:HIc8RWrNcvXLM7u265wppSnMo
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22093cfa7762330acd024087d83d3110_NeikiAnalytics
Files
-
22093cfa7762330acd024087d83d3110_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bijdhfdg Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE