Behavioral task
behavioral1
Sample
5dabeb907d579025bbe83b544ad0f750_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
5dabeb907d579025bbe83b544ad0f750_NeikiAnalytics
-
Size
30KB
-
MD5
5dabeb907d579025bbe83b544ad0f750
-
SHA1
7fecabbf5f4f373269fc0e4c514e68ee352959a2
-
SHA256
35bc1d395b7fbb1d4cb2702ad83d1e4ae990651af9078c264fd9c74277f9fba9
-
SHA512
259da806fa5ab22baa1326f4e0d036a860ca9ad753eece2b9ab40ad05016287fef18421d6034491ab5f74214e00eb15507c8d2301de47dc8220e65ee71ae34b4
-
SSDEEP
384:cLwdVNfqNBOmiIEhlJbttNwlL3YV7tumYbo4MXe6xQpRMgtFuBLToOZwXJpnv99a:1VNfBtzwJIQmLVO6xIvFN9RvOqhcb5
Malware Config
Extracted
xworm
YOR൲E䖕寬൲RYR
-
Install_directory
%Port%
-
install_file
$77S.exe
Signatures
-
Detect Xworm Payload 1 IoCs
resource yara_rule sample family_xworm -
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dabeb907d579025bbe83b544ad0f750_NeikiAnalytics
Files
-
5dabeb907d579025bbe83b544ad0f750_NeikiAnalytics.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ