Behavioral task
behavioral1
Sample
cb9db25c0f5d4f2de624f5f65fb15ad0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
cb9db25c0f5d4f2de624f5f65fb15ad0_NeikiAnalytics
-
Size
198KB
-
MD5
cb9db25c0f5d4f2de624f5f65fb15ad0
-
SHA1
530cb19540f4f81e7560c70acb5c6cc9e31896b9
-
SHA256
a18e50a2183978e95529c16d29684b0798e11ef2e0b4ba1dde4a8b097fa81aa0
-
SHA512
e6de7ecf1794f28a64500739d4a5d32dd7e39119164cd20fc96274c1f23a649dd696f1083b75bc2f33497f68c1b84e0b80c75ab567d2a43ce5f4553af4fce4e2
-
SSDEEP
3072:ZhOmTsF93UYfwC6GIoutFza6BhOmTsUm82xpi8rY9AABa1JePQKN1hJC4:Zcm4FmowdHoSha6Bcm4JddW7Y6XJC4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb9db25c0f5d4f2de624f5f65fb15ad0_NeikiAnalytics
Files
-
cb9db25c0f5d4f2de624f5f65fb15ad0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECirJzGp Size: 1KB - Virtual size: 1KB
wkJfYGjg Size: 31KB - Virtual size: 30KB
lcVzaaqg Size: 16KB - Virtual size: 16KB
lUcKhPBE Size: 2KB - Virtual size: 1KB
pAXqbvIA Size: 1KB - Virtual size: 1KB
oIuDZgXR Size: 512B - Virtual size: 506B
ikQCxZps Size: 4KB - Virtual size: 3KB
zMwKRJQJ Size: 3KB - Virtual size: 2KB
VCJyHMvV Size: 1KB - Virtual size: 1KB
ljTyMjHW Size: 15KB - Virtual size: 15KB