Behavioral task
behavioral1
Sample
214411b70f2e05d360c44d3417b9a5f0_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
214411b70f2e05d360c44d3417b9a5f0_NeikiAnalytics
-
Size
333KB
-
MD5
214411b70f2e05d360c44d3417b9a5f0
-
SHA1
58606509ba454f7d12994e345863c8a541bbffa4
-
SHA256
5746c9bf9a3a84619d8de6f73f7d8d48201a6f8aed9606bc79507c43abf31d68
-
SHA512
88c0a998749ea530dceb310bfdbac666269fe77e4f6880fa187cc2410006b739becd8b9eaba8a5f49b367fd9b85303d8439eebcf1fab93d4a8ec3dfd5db950a7
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1iK:x4wFHoS3eFaKHpv/VycgE8p
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 214411b70f2e05d360c44d3417b9a5f0_NeikiAnalytics
Files
-
214411b70f2e05d360c44d3417b9a5f0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE