Behavioral task
behavioral1
Sample
095641b1fbf2e0f7d8f31b86b61f00d0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
095641b1fbf2e0f7d8f31b86b61f00d0_NeikiAnalytics.exe
-
Size
402KB
-
MD5
095641b1fbf2e0f7d8f31b86b61f00d0
-
SHA1
9a3c9b039c4bedd245cac3b574f77ef9634fb1fa
-
SHA256
a1de132952c45ef5095f6191802f5645b09f1bbb38179accf0f817b42b8395d4
-
SHA512
413db4471655f9c1c7be96025fca8b779f2bb3c59773c5e647b264fe6ef2b0b2b4c461fa0dbc16cadd40c2ff6dd16adba488323f5d62266102ceb6c875b42278
-
SSDEEP
6144:kcm4FmowdHoSph3Ymu8wdHoSM05d34iWRbzami3H:y4wFHoS3zuxHoSTd34iWRhi3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 095641b1fbf2e0f7d8f31b86b61f00d0_NeikiAnalytics.exe
Files
-
095641b1fbf2e0f7d8f31b86b61f00d0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE