Behavioral task
behavioral1
Sample
d28573616c661d668f9acdf90ebe35c0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
d28573616c661d668f9acdf90ebe35c0_NeikiAnalytics
-
Size
121KB
-
MD5
d28573616c661d668f9acdf90ebe35c0
-
SHA1
151b7e48d15f37d2c17fe6495251b56d76ce297b
-
SHA256
7126c1deed9cb353123436467b4bbcb52a1109b0333fbf907f8f641aafa1de3b
-
SHA512
49bb2f47324c316009fb2fddb24e7e8863193a3e16c4dd995f37845d3426ebbb8589f07b06e4b22fc525873d6d353ae6998d3edfe1557941b6e21dae0908d67f
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcka62c+8+dRN13:9cm4FmowdHoSZ6lCXr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28573616c661d668f9acdf90ebe35c0_NeikiAnalytics
Files
-
d28573616c661d668f9acdf90ebe35c0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE