Behavioral task
behavioral1
Sample
b0dadeefc2742be41d6df084ca321000_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
b0dadeefc2742be41d6df084ca321000_NeikiAnalytics
-
Size
101KB
-
MD5
b0dadeefc2742be41d6df084ca321000
-
SHA1
a36e7dc7bd60f1b744c073af894aefce933ed0b1
-
SHA256
ce1549476168e8ecb92b8b759e55b455fe93e81e2c5591153aeca0a3eb4620c7
-
SHA512
d24a1bc911ee41619efb23a48803ecf47d10e39e2303cb9c95812f3d66f6eb323340e82b5e6225a948d47087d4cdace2e29a9981c7a997f65d3501da2fa48975
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFbUZJjw5Ivov1d3ZdpQm6hU:9hOmTsF93UYfwC6GIoutz5yLpRDN6hU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0dadeefc2742be41d6df084ca321000_NeikiAnalytics
Files
-
b0dadeefc2742be41d6df084ca321000_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE