Behavioral task
behavioral1
Sample
d3603d570c2641f4df90f8588903bc30_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
d3603d570c2641f4df90f8588903bc30_NeikiAnalytics
-
Size
363KB
-
MD5
d3603d570c2641f4df90f8588903bc30
-
SHA1
d4eca20501473ddef4b2dd6f06b5b8ba4bacd9ef
-
SHA256
13fc7e8d72968199d25628f46ae372251f0b5fedb6f5c880d34bd57c09d4ddbb
-
SHA512
0a63f99fd82e88486fd4d005fc81b629bfd861e4f453be36c2b5385670bea987fdd5fd6933b16f13e60b2db1cb42b91929e525d5d3bb48b0cc8053d3278b42e1
-
SSDEEP
6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE8X:/4wFHoSQuxy3rTXIM18X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3603d570c2641f4df90f8588903bc30_NeikiAnalytics
Files
-
d3603d570c2641f4df90f8588903bc30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE