Behavioral task
behavioral1
Sample
65e459b2abece644f1ca4f7b69d0c240_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
65e459b2abece644f1ca4f7b69d0c240_NeikiAnalytics
-
Size
333KB
-
MD5
65e459b2abece644f1ca4f7b69d0c240
-
SHA1
bba7e489a94f4578be984d0f3657096150fe67aa
-
SHA256
c73351347cfb4ffbc9709df566c8a3827f22a5216c72ec2bec257d6cd9c07e9c
-
SHA512
ffc5d250801459756f2a8398ae27f32d05866c274447c524657d9c7ae6a09d8073fb254a5830034fbe6b89dee1f7d23ecc1e16ae3e4a234c017dda7adce760cb
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/L:x4wFHoS3eFaKHpv/VycgE8oL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65e459b2abece644f1ca4f7b69d0c240_NeikiAnalytics
Files
-
65e459b2abece644f1ca4f7b69d0c240_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE