Behavioral task
behavioral1
Sample
ef8b0d45fe5b0e7a0c246301ae1db6b0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
ef8b0d45fe5b0e7a0c246301ae1db6b0_NeikiAnalytics.exe
-
Size
75KB
-
MD5
ef8b0d45fe5b0e7a0c246301ae1db6b0
-
SHA1
018ea7a97e9e11f0e3e9debdc73249687f3a562d
-
SHA256
35c568463ff0e322f7a33b8ce02dc32f86a6020164324cfa33aba48152bd52fe
-
SHA512
c6d0c95687bb3af155ccd57dd0ba5059968150e0cf67b71a062e1f25be34aeaf455b7e44798bac7e3b07e6b0cd03a473d8b47d03ad09f46be2082b118b2a2c0d
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE8l:9hOmTsF93UYfwC6GIoutz5yLpOSDT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef8b0d45fe5b0e7a0c246301ae1db6b0_NeikiAnalytics.exe
Files
-
ef8b0d45fe5b0e7a0c246301ae1db6b0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE