Behavioral task
behavioral1
Sample
0ab3a9807443a20a3fdf4599aa5475a0_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
0ab3a9807443a20a3fdf4599aa5475a0_NeikiAnalytics
-
Size
334KB
-
MD5
0ab3a9807443a20a3fdf4599aa5475a0
-
SHA1
d7d8745da660651671a53fcfdbda5d9959f2fce5
-
SHA256
55ab8dc671a7ebb01cf1f324b045249a9c371ea3674c133c1935e9e4f6e2a506
-
SHA512
a167d47b6537ccd496abf5eb24552579de477143857cf0a85dce2ca506222989d7b1cc2c7e872e082a90b00c90e0f0992252913da8648ba845a1af4370a2f090
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1i/i:x4wFHoS3eFaKHpv/VycgE8oi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ab3a9807443a20a3fdf4599aa5475a0_NeikiAnalytics
Files
-
0ab3a9807443a20a3fdf4599aa5475a0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE