Behavioral task
behavioral1
Sample
89dd2e896f31c7e73be29656af824de0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
89dd2e896f31c7e73be29656af824de0_NeikiAnalytics
-
Size
253KB
-
MD5
89dd2e896f31c7e73be29656af824de0
-
SHA1
ccc452a831c39515f11f445d8d13fa99adf1726d
-
SHA256
323bab3161cd559aee89f5c09d2f206ccfb8da8d2b013f8ae9937184eda55e5a
-
SHA512
f5fea2f42c981f929c2444225ec1ed527624092cc2ea24a796af8f980b9adc48f2e8b653f6860325b1d764eb6b67c3b97c40c975a3ce7523f503d01a0e1a585c
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfrg:y4wFHoS3eFaKHpKT9XvEhdfrg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89dd2e896f31c7e73be29656af824de0_NeikiAnalytics
Files
-
89dd2e896f31c7e73be29656af824de0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE