Behavioral task
behavioral1
Sample
6b13dbd402bd48260692451431ecd070_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
6b13dbd402bd48260692451431ecd070_NeikiAnalytics
-
Size
718KB
-
MD5
6b13dbd402bd48260692451431ecd070
-
SHA1
ee2a1a0244ce3f590f015d8e328080ea4d85ca9e
-
SHA256
06167377de35455c2c17bbce66a3f9fdb3229ef8694d5fa0138a23c62aa1fb6b
-
SHA512
d486da1286c7d793da78220cd8412391e47168e78e51e4a7e1629435bec4e99550887046a2b7d1b67be800825aee225ca304d741ee969ba5920108a3fff04765
-
SSDEEP
12288:OOFVQtZIBxvTHzd+mtEe+IDt8Eq5jO1+QBWLIPr1lUtIEpqKYSM4AvHPg0eby/4U:O2yIBxvHpthvt8V5S1eL61lUIEp65VHh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b13dbd402bd48260692451431ecd070_NeikiAnalytics
Files
-
6b13dbd402bd48260692451431ecd070_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 604KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE