Behavioral task
behavioral1
Sample
4ae82500387cd7b05e58dcad2e8ccff0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
4ae82500387cd7b05e58dcad2e8ccff0_NeikiAnalytics
-
Size
79KB
-
MD5
4ae82500387cd7b05e58dcad2e8ccff0
-
SHA1
66d0997a09063aa827f06cc4609d7210463437e1
-
SHA256
cc5efccf83be810fadeb225bea48a69189a02f37cad64020d0e45570d3fe9213
-
SHA512
c46ceaa3c0b6a606c2eea16ab683831ac379b1489a3965f95f307fd0775660ead78b3e54515e61fa522e2d7908000cb6f716fc7465f0f39e997cc9cdbd563401
-
SSDEEP
1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TQpKJ:zhOmTsF93UYfwC6GIoutiTU2HVS6p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ae82500387cd7b05e58dcad2e8ccff0_NeikiAnalytics
Files
-
4ae82500387cd7b05e58dcad2e8ccff0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE