Behavioral task
behavioral1
Sample
1ec6dd4b27423c7d412a502bf0feaab0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
1ec6dd4b27423c7d412a502bf0feaab0_NeikiAnalytics
-
Size
334KB
-
MD5
1ec6dd4b27423c7d412a502bf0feaab0
-
SHA1
a0c7341b1bada562167f1b6ba7ae9806cf764a70
-
SHA256
5c519adc085c9e009e1af33c25a6cb7c5fdd49e63f9d42874330e205e9a14994
-
SHA512
23b5e72eb9e8d69aa2cd5e625e1618ac59cb03e46155e513024fc51bb7e21844f279b6a13672ae45cfa4e533aedd8c43b63dd84209b1ef8ab875cd05cf817185
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/B:x4wFHoS3eFaKHpv/VycgE8oB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ec6dd4b27423c7d412a502bf0feaab0_NeikiAnalytics
Files
-
1ec6dd4b27423c7d412a502bf0feaab0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE