Behavioral task
behavioral1
Sample
df6e655710d6ce737eda06c11c3b1a10_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
df6e655710d6ce737eda06c11c3b1a10_NeikiAnalytics
-
Size
85KB
-
MD5
df6e655710d6ce737eda06c11c3b1a10
-
SHA1
4a00729ba5b34951a9c80eda51ae5cf41f3f70c9
-
SHA256
4966952eec97dfb2ac168e0521a24b7453b173d53fc13b2031e744a59cac8c3c
-
SHA512
363be85a443c6dc0cdd1f35737bc442924be4e05ab923f8fc727d9a828486481d0814e5631825c697570a06123c886f2ff5d9cd20fdc4f9801e61e3e101ae337
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNlIQkPvA3qrEvO7C82krfiEqks:khOmTsF93UYfwC6GIoutpYcvrqrE66ka
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df6e655710d6ce737eda06c11c3b1a10_NeikiAnalytics
Files
-
df6e655710d6ce737eda06c11c3b1a10_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE