Static task
static1
Behavioral task
behavioral1
Sample
20240520116d81b331fdea50a765f3903f15d17fvirlock_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20240520116d81b331fdea50a765f3903f15d17fvirlock_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
20240520116d81b331fdea50a765f3903f15d17fvirlock_NeikiAnalytics
-
Size
205KB
-
MD5
116d81b331fdea50a765f3903f15d17f
-
SHA1
de9141121d973c9b2999a4a00d044234ac4ab5e2
-
SHA256
acff3ba3135112df5f1f349e894cb1ff38459da9309a937922425e3303d56f2d
-
SHA512
d549336307ba7e38cd479244163ffbbbbd7f40cd495beaeec11be9e5d161195931395b694cc8481649760958cd1c6b93ccb6e28d0488424c980f126f630803ff
-
SSDEEP
3072:hmUZoOKr66jie3vKNHQz8Ft5u1ov2CgacSMRqWvJ4FV8ji/akA5ZUzVAbbB6Vmjc:YWBFo7Skw8+/akIUGp6uym0bi5J+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20240520116d81b331fdea50a765f3903f15d17fvirlock_NeikiAnalytics
Files
-
20240520116d81b331fdea50a765f3903f15d17fvirlock_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE