Behavioral task
behavioral1
Sample
a91adc5f20b9aa6eb0f87aab3cfa7bd0_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
a91adc5f20b9aa6eb0f87aab3cfa7bd0_NeikiAnalytics
-
Size
58KB
-
MD5
a91adc5f20b9aa6eb0f87aab3cfa7bd0
-
SHA1
3207bdb38568770486e7a5d9779381dcabc7a4cb
-
SHA256
4f5e8d2554cb52ba229cea6df573b18fbb928f340d8e556834f97698cc1744ff
-
SHA512
de3249f3cf19a7565585f4128fd2ffbca4c6a1e2ab48c0b89bd47fc9a147ecef3da481a4094f952bde0b31cecba17234eac86e2ecd06eb908f2ca5c277eac453
-
SSDEEP
1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJPhbMiFX:zhOmTsF93UYfwC6GIoutiTm5hIiFX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a91adc5f20b9aa6eb0f87aab3cfa7bd0_NeikiAnalytics
Files
-
a91adc5f20b9aa6eb0f87aab3cfa7bd0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE