Behavioral task
behavioral1
Sample
8655ee9dc9660c71a95d21804bb7b0d0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
8655ee9dc9660c71a95d21804bb7b0d0_NeikiAnalytics.exe
-
Size
334KB
-
MD5
8655ee9dc9660c71a95d21804bb7b0d0
-
SHA1
619c6bed63db5d4c556622af15e85a36fadb65d2
-
SHA256
2d6510c9d2d46a48b7f95000f2cf2ef4278565507a10af4038fa23c2a18c6782
-
SHA512
d2ef6e3c403efa1034620999d9ff3ae8ed83a5d0a5011098663ccf6d4748b057e807e8183e9e8ed9c28fc0bcc86b48a22f483643d129443302d205bae6b4a673
-
SSDEEP
6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1is:x4wFHoS3eFaKHpv/VycgE8P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8655ee9dc9660c71a95d21804bb7b0d0_NeikiAnalytics.exe
Files
-
8655ee9dc9660c71a95d21804bb7b0d0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE