Behavioral task
behavioral1
Sample
37c573a93e73f632ae5123a798f80c40_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
37c573a93e73f632ae5123a798f80c40_NeikiAnalytics
-
Size
340KB
-
MD5
37c573a93e73f632ae5123a798f80c40
-
SHA1
81a526a2211d721bf6516fd4161a65bda3d0bad5
-
SHA256
45a8b24df3346005928185943b40d68704f03768e3d8cfb81c7fdb61a1a3e564
-
SHA512
f9016ccc2ff8efacfb05dab099b5f84dbbfcb44b7c4f2de0d0f9190573d7d00535239782cad9293364d29f7e6c8cb062443dc4e570a1d2c1b849d9b961fd3b48
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBHNgu5ex1B2OkEv0KvmhNiYx2:9cm4FmowdHoS4BtguSPKyHYk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37c573a93e73f632ae5123a798f80c40_NeikiAnalytics
Files
-
37c573a93e73f632ae5123a798f80c40_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE