Behavioral task
behavioral1
Sample
d6234d92043e518bf52757c2b60f4f90_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
d6234d92043e518bf52757c2b60f4f90_NeikiAnalytics.exe
-
Size
255KB
-
MD5
d6234d92043e518bf52757c2b60f4f90
-
SHA1
fc9b21a1502f145bd4858e5a53432d6b86784af9
-
SHA256
8f800e8e5295489943648ea4e60d7a859f58a6650b15671de67a5a6455a15e6d
-
SHA512
5dd089839a066eae4c987e00b93b7682ca2a448119fc290baf57b1f82b63f62c6fd2980f538cfbaabe0203794106f0f54c8d4dbdb55db8a8f1c98dfeb62668b4
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfrQ:y4wFHoS3eFaKHpKT9XvEhdfrQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6234d92043e518bf52757c2b60f4f90_NeikiAnalytics.exe
Files
-
d6234d92043e518bf52757c2b60f4f90_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE