Behavioral task
behavioral1
Sample
e1b02614f7b092ff91335498b9ee3f30_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
e1b02614f7b092ff91335498b9ee3f30_NeikiAnalytics
-
Size
54KB
-
MD5
e1b02614f7b092ff91335498b9ee3f30
-
SHA1
6b461fd3f403f45a8b9964bbc9b3160097a421d6
-
SHA256
7f7069b5fc08a1b06e04fb4e4f22426fbb190c952358ca5a620f32a0834a1676
-
SHA512
f9d867298b5100f309f588c24d347bec23631056838a386355ad5fb5cd5ea741e67c16b03fed862e078d366f149b7e454527f7186ac04880115307cb7c56f26b
-
SSDEEP
384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiif:3DcZyUpULCgod/J96ayXv/pWnnA8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b02614f7b092ff91335498b9ee3f30_NeikiAnalytics
Files
-
e1b02614f7b092ff91335498b9ee3f30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE