Behavioral task
behavioral1
Sample
6a669747be3fd3b3260abe4f4d6d61a0_NeikiAnalytics.exe
Resource
win7-20240220-en
General
-
Target
6a669747be3fd3b3260abe4f4d6d61a0_NeikiAnalytics
-
Size
479KB
-
MD5
6a669747be3fd3b3260abe4f4d6d61a0
-
SHA1
9396c209c8f6071f8047e6fd2a70e25f77765f77
-
SHA256
ca6d3bab08fdd40e59b94df9f9333b079f9075ae726c67da4461f040e69d8117
-
SHA512
5963684e36083e0fc1ddeaa526e2479858ad2ea24c325f4c3f84a16b7906bc01b8176b12ee9dad139e9ae38bb25a5e7302220bc930da3710751693cf632b39ad
-
SSDEEP
6144:l63+NDdL0yqu5uPBhLRjpML0KYj3NAilJ0FcmjUY:I+HAJ3PBh9jkK3NAi/0Fcez
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a669747be3fd3b3260abe4f4d6d61a0_NeikiAnalytics
Files
-
6a669747be3fd3b3260abe4f4d6d61a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
camzt Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxda Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE