Behavioral task
behavioral1
Sample
538aaeff90ad0b1381f293a6df596bd0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
538aaeff90ad0b1381f293a6df596bd0_NeikiAnalytics
-
Size
378KB
-
MD5
538aaeff90ad0b1381f293a6df596bd0
-
SHA1
96b8f03bd0f446de8bbbccf2f1b6bb3bddc133a8
-
SHA256
5187e4368819354839d1e567ecc800fd7a20d27bcf5aeae0f285a15b12a56a1e
-
SHA512
acb71b5baa48fd8aedd5b3ecda51a33ad3b8135bfe2413b013514f134efc03482749e83dd79fe022b7ed917d5b4e768677aa626d052fff7b20b3ecc4d4ad5f25
-
SSDEEP
6144:9cm4FmowdHoS4WEkMawdHoSbdwqGw+tw+ttidCy1RW:/4wFHoS4WEkMTHoSbG++tw+tYYyi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 538aaeff90ad0b1381f293a6df596bd0_NeikiAnalytics
Files
-
538aaeff90ad0b1381f293a6df596bd0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE