Behavioral task
behavioral1
Sample
2f1d4728c2b3de6ce52345da42eca630_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
2f1d4728c2b3de6ce52345da42eca630_NeikiAnalytics
-
Size
122KB
-
MD5
2f1d4728c2b3de6ce52345da42eca630
-
SHA1
02c16126652fa0071038f8bf594d021fb50e13bf
-
SHA256
6b258e4a75493e5c3c68e0ff1102e6a1e627406edc4f2f23f57512ee620746c5
-
SHA512
cb263825bbe01353967d64620324fc164109bfd35fa66d0dec4ae6dc6a66fa5eceeddb82064f72a415d42839d27e77c4526edb3b466840f11359e404a6e28043
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcka62c+8+dRN1Gw:9cm4FmowdHoSZ6lCX9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1d4728c2b3de6ce52345da42eca630_NeikiAnalytics
Files
-
2f1d4728c2b3de6ce52345da42eca630_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE