Behavioral task
behavioral1
Sample
2ca08ad96eba4655c61b06f4a7f0a4c0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
2ca08ad96eba4655c61b06f4a7f0a4c0_NeikiAnalytics
-
Size
91KB
-
MD5
2ca08ad96eba4655c61b06f4a7f0a4c0
-
SHA1
d5f1b5d19cffa20dbf87eb1a1237f8b95cdf4d22
-
SHA256
a7b150177dad4f9bd7435b44d19b0a035e932d82a0cf7cc21e1d37c97e01d372
-
SHA512
3a5e1e001fe38c3d8bbaba5f77104ab023d6982f3512f21e6a317584767135149fbdc00f03c9763ad190ff56f66c3683b48b0ca5d0257ba4db7d3093db8b1012
-
SSDEEP
1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpLR:8hOmTsF93UYfwC6GIout0fmCiiiXA6mL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca08ad96eba4655c61b06f4a7f0a4c0_NeikiAnalytics
Files
-
2ca08ad96eba4655c61b06f4a7f0a4c0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE