Behavioral task
behavioral1
Sample
4ce085691d33118a048dff1fe59e11f0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
4ce085691d33118a048dff1fe59e11f0_NeikiAnalytics
-
Size
90KB
-
MD5
4ce085691d33118a048dff1fe59e11f0
-
SHA1
442939f75b05a1f9d4369cc449dec19981a6e83a
-
SHA256
8f665309d84473b2ca544ef5645b89c5b783eb78cc31e6d8f3dc141f2171e8e1
-
SHA512
622ece845653db0560655575c2503332ae3df3755c5344906f21602818108257a581d931ca5aba28315f6e9d30c4caf96819236ea2d4d77d2d749d660820c542
-
SSDEEP
1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpR:8hOmTsF93UYfwC6GIout0fmCiiiXA6mL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ce085691d33118a048dff1fe59e11f0_NeikiAnalytics
Files
-
4ce085691d33118a048dff1fe59e11f0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE