Behavioral task
behavioral1
Sample
79164705a18528d111e0f65be61e63b0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
79164705a18528d111e0f65be61e63b0_NeikiAnalytics
-
Size
78KB
-
MD5
79164705a18528d111e0f65be61e63b0
-
SHA1
9a3362ee16890fdb84a5847fcf1fc6d17352bb70
-
SHA256
3b23b0b37c1a6bd783d1d983754bf43894f028b08a3919209a2940bd6169a7f6
-
SHA512
fb69f1af2978928803fec10d5efed71ccff5079c06ef2fcc3b8144ce21812f056e343df4ed2895ff07d1fae587cf8978b2a8a3c59c3c2be4f5566a0f546c4c1b
-
SSDEEP
1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TQpK2:zhOmTsF93UYfwC6GIoutiTU2HVS6W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79164705a18528d111e0f65be61e63b0_NeikiAnalytics
Files
-
79164705a18528d111e0f65be61e63b0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE