Behavioral task
behavioral1
Sample
547e5b3f9969565488b9c6643d316070_NeikiAnalytics.exe
Resource
win7-20240220-en
General
-
Target
547e5b3f9969565488b9c6643d316070_NeikiAnalytics
-
Size
122KB
-
MD5
547e5b3f9969565488b9c6643d316070
-
SHA1
245593d0a018277aebf12ba249c2ff5f394d9fdd
-
SHA256
d7db913e38d216d73cd4068081054782df3d7a06ae9b7c6b61822981d6cb6f58
-
SHA512
ad79e6b448a302d634a521bef85ef983ddbd8651fb4a35b55c20991cefb5ffb69c941c948b10be2a109fc9ddf8fd14581c505d77d739c76f84137df68123699d
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JgY0nUb:9cm4FmowdHoS49oUb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 547e5b3f9969565488b9c6643d316070_NeikiAnalytics
Files
-
547e5b3f9969565488b9c6643d316070_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE