Behavioral task
behavioral1
Sample
b03a5b499073e12a629479019e7c0ec0_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
b03a5b499073e12a629479019e7c0ec0_NeikiAnalytics
-
Size
164KB
-
MD5
b03a5b499073e12a629479019e7c0ec0
-
SHA1
d025c06a14cfbff013bc8251809d827f115d59a4
-
SHA256
e5d830ddbbacc48250dc809363b1e5a3d047e40ae93bab3fd8227419d5a49d46
-
SHA512
60eda102d5b84c648b934c22ca556f0d524ff5c3c80fad72d59a70d6072812abff0f1bc6c128427fd5a9fdafc81e067252310cb43caa7acddddcc074666bb0f1
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4t6NDWOH148BH15vd:kcm4FmowdHoSphraHcpOFltH4ttj8BHJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b03a5b499073e12a629479019e7c0ec0_NeikiAnalytics
Files
-
b03a5b499073e12a629479019e7c0ec0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE