Behavioral task
behavioral1
Sample
bb0de0a699fb613ee98594d1084c8030_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
bb0de0a699fb613ee98594d1084c8030_NeikiAnalytics
-
Size
955KB
-
MD5
bb0de0a699fb613ee98594d1084c8030
-
SHA1
bd94b0d3ba340c2de1e65eb35626236a005438c3
-
SHA256
c0ec564005828c4e36a24e85a5d9274230eb6c2f9dc5925608462e7c531741d1
-
SHA512
5c93b58a1d7ec3d816d2bd1c13d458983ee1c534750af2ffa8159840fcb3b438c3727d1121361a9ee1c6e9a1c5c616c55332a025fb59d47ad8affac714d5c566
-
SSDEEP
24576:oTEDSO9JrRU6jD8C94UKBBLZmX1+RnM3L2N9Y3G3wSK6JE4t6FGerrthf:oTEDN9JRUiqZmF+RnM3L2N9YWgSK6JEb
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb0de0a699fb613ee98594d1084c8030_NeikiAnalytics
Files
-
bb0de0a699fb613ee98594d1084c8030_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 440KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ