Behavioral task
behavioral1
Sample
6ff585dc02e4e84bc897894e26724510_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
6ff585dc02e4e84bc897894e26724510_NeikiAnalytics
-
Size
307KB
-
MD5
6ff585dc02e4e84bc897894e26724510
-
SHA1
2b279c96d3aa5efeab83039a3f8d9e50438cc8d4
-
SHA256
aff07332d2ece23abb464b40ac602afc5275a19bf63058ac9a0b5c128356cd7d
-
SHA512
8f3573e72c7a3d712e609958e647da8f4abc0dae1f08c590d6eddc08ef3c4734294cd48a5787bc4f752b6f76101040b9b10af1d02827d7a437f2ed5b77e3841b
-
SSDEEP
6144:9cm4FmowdHoS4/8UJCf4upvUjQSmpikAAKeMjiN:/4wFHoS4kUJE4IuzQifAKjjC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff585dc02e4e84bc897894e26724510_NeikiAnalytics
Files
-
6ff585dc02e4e84bc897894e26724510_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE