Behavioral task
behavioral1
Sample
05f7b168268562b8e6eaac8a0645ea40_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
05f7b168268562b8e6eaac8a0645ea40_NeikiAnalytics
-
Size
702KB
-
MD5
05f7b168268562b8e6eaac8a0645ea40
-
SHA1
2f3f9ec5b493f0d128fb40112952442f758ccc39
-
SHA256
f6cc62cdd15c8516983a14ed0fb0fd1d3175f745fb32a64aba328c1afad53fcb
-
SHA512
3b52afbc2338723370beac0d7dc249320a02b3b32012f92012196cb4752c55926440aba0f7e58e21509d67cc1ebcbd2521618225a80cdb439129d95a9113f363
-
SSDEEP
12288:Sh8/BQ7Am7QNyjL80iZm0saoLRW9OMFwMPkDH/QiPLxvzblu2FKp:Sh8JQUTYjL80iZNsaoLAEMOMPkrQiP9q
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f7b168268562b8e6eaac8a0645ea40_NeikiAnalytics
Files
-
05f7b168268562b8e6eaac8a0645ea40_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
OIYTGFRT Size: 380KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OIYTGFRT Size: 301KB - Virtual size: 304KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE