Behavioral task
behavioral1
Sample
00b7c91035c9fa564a62c18d51bee410_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
00b7c91035c9fa564a62c18d51bee410_NeikiAnalytics
-
Size
371KB
-
MD5
00b7c91035c9fa564a62c18d51bee410
-
SHA1
7b9a4965a7fadc0645e57270fc866cbe5f56ecd5
-
SHA256
1e99c1a24a2083947fbf79feff8ef695e8b467d890672c7f9e00c11b74c764e3
-
SHA512
af4952d0d010d71b6e15baf0b6401cb8e49ed1cd071582e2061943c979fa889e6ee4c9cc9e606195189093f2b63aac51d3aca04ef8931c69c59b2e60ba0a73f0
-
SSDEEP
3072:BmVwRKCb75xkX+Sy37JhLomyxyFa656WexiQ+76U75xVErRt3Lo7O:BmVnE6+RUmGXWkYU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00b7c91035c9fa564a62c18d51bee410_NeikiAnalytics
Files
-
00b7c91035c9fa564a62c18d51bee410_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE