Behavioral task
behavioral1
Sample
23570ded44e51df60cd5fd4932546210_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
23570ded44e51df60cd5fd4932546210_NeikiAnalytics.exe
-
Size
282KB
-
MD5
23570ded44e51df60cd5fd4932546210
-
SHA1
3c0fb3c8eff2aedf8701f3cf70f1d9d0ec0231b5
-
SHA256
d2e6751345c9fe6e28f0d725d9e3902ea2769c285e450c47a48c91dc38995927
-
SHA512
3af99bf9bb1de6fe260fc46f500f1aee4c3d161506d073fcf21acfc2fa2edf82a13b2e5f180830843b6b8436ed46a3da73280e3f59e2fc901e29548203700dee
-
SSDEEP
6144:EBNx1D6DrRKxl1bwswlVtTPrC3RIFnbFkEjiPISUOgW9X+hOGzC/:iBD6DgxMl3VpkmZzcukG2/
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23570ded44e51df60cd5fd4932546210_NeikiAnalytics.exe
Files
-
23570ded44e51df60cd5fd4932546210_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ