Behavioral task
behavioral1
Sample
673fe489274a6ea9c52eeb9c950a4590_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
673fe489274a6ea9c52eeb9c950a4590_NeikiAnalytics
-
Size
1024KB
-
MD5
673fe489274a6ea9c52eeb9c950a4590
-
SHA1
9e945c2581da71a093db532805acc5256368dd65
-
SHA256
6aaff4a987a5ba56780ebac5c831d3adcf8dfe8d2da13e17d0ee06cde334300e
-
SHA512
9f90bc3df3965cd2539145cca39c6108f11e5cd8acc4ae48627a0cf1bb5d8b32de768c5bd3e23b0c85c151f52a168f4b4ce4296331bed40b39d8dd2989c8366e
-
SSDEEP
6144:xuLyJK3bcQbHsmEDePXoMTQ01N0gAnNYcNNZTM:xuLys4oHi8ZU0w7NfM
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 673fe489274a6ea9c52eeb9c950a4590_NeikiAnalytics
Files
-
673fe489274a6ea9c52eeb9c950a4590_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ