Behavioral task
behavioral1
Sample
d4572da746d63486fcb34d97312a04c0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
d4572da746d63486fcb34d97312a04c0_NeikiAnalytics
-
Size
272KB
-
MD5
d4572da746d63486fcb34d97312a04c0
-
SHA1
d4f1477044d0a3a69c51da45608389cd9e79b483
-
SHA256
453e1050a58e1f7dd7a81533c8784e2ba63dc1c24705e952d715c096f55cd980
-
SHA512
e732db6df2243bd08c55f4fa1b964866db81c25fae4d136eccce352a444bb51e0aeb7e8f9811096f89cc3c3a0cbd6b796d19d25c7434dd5d561c646e567f2206
-
SSDEEP
3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBuItR8pTsg8QO6GIouixsp+CvM56ATgLq:9cm4FmowdHoS4BftapTs8Hoo+6MjTVVz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4572da746d63486fcb34d97312a04c0_NeikiAnalytics
Files
-
d4572da746d63486fcb34d97312a04c0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE