Behavioral task
behavioral1
Sample
cd98bf85726e077fdc1114345048c960_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
cd98bf85726e077fdc1114345048c960_NeikiAnalytics
-
Size
793KB
-
MD5
cd98bf85726e077fdc1114345048c960
-
SHA1
1bd515ed240ae72b305ba036028f9c02f44cc527
-
SHA256
1454ab8b83b6d10e1f22a6b290f6599bc47740c0458849e56fed087dfb82b967
-
SHA512
036a9be41aa38b40f14a479ecfc49934e31bdf2678a56154294002bef8d4c8b43f859141dde49a03dde401cf2d5f7068cb7a3cc9826dba712d96a411643b233b
-
SSDEEP
24576:dW298E8uFXy6tu9NLlgjOETn4/5BWpUohOqnDMsMbol/XPRsDDi:x98E8uFkNLlCOETn4/XWGTqnDMsMbolX
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd98bf85726e077fdc1114345048c960_NeikiAnalytics
Files
-
cd98bf85726e077fdc1114345048c960_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 219KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ