Behavioral task
behavioral1
Sample
bc8e804e23f70fc785b18b6c954b0b90_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
bc8e804e23f70fc785b18b6c954b0b90_NeikiAnalytics
-
Size
191KB
-
MD5
bc8e804e23f70fc785b18b6c954b0b90
-
SHA1
2b88257148766d0eff2a5af6d0c9e609a47c60d8
-
SHA256
8c16c421b659dab3d7952e39f46f52a6ea4ead8483933dc5a8d75e98569b3986
-
SHA512
cb516240a9964b3465e2e247f210a23ea25e9b7da16ce9a4b1a3f0d510d910d6baaf427f4744451489dc507fc9e1dcbb96e0fd40e3bf2ea08c96503e1cf276ae
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JjKzO0Y9Pe/j+a1yi5MJWT4101:9cm4FmowdHoS4WzO7BuqJi5MUT71
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc8e804e23f70fc785b18b6c954b0b90_NeikiAnalytics
Files
-
bc8e804e23f70fc785b18b6c954b0b90_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE