Behavioral task
behavioral1
Sample
52adefb782297d16a07c4ec701dc92093950fd71408a38aee27641fd4d75d093_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
52adefb782297d16a07c4ec701dc92093950fd71408a38aee27641fd4d75d093_NeikiAnalytics
-
Size
1.6MB
-
MD5
32de8523d0ed974f241fa6bb72d549b0
-
SHA1
c62ec0b854116a3654e4827aa6fe7a1ff60a32fd
-
SHA256
52adefb782297d16a07c4ec701dc92093950fd71408a38aee27641fd4d75d093
-
SHA512
6f3234d93637cf2a8be2dc17b7f3de4ab1f0a1abe587fd490042a9ff9d23fdd8a7dfdf8178a6bcecb030127d3e3a9fc66d50ba4f86d6932705d840cc0c3bcaa8
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9oztFwIR1Dy2NUF:GemTLkNdfE0pZaA
Malware Config
Signatures
Files
-
52adefb782297d16a07c4ec701dc92093950fd71408a38aee27641fd4d75d093_NeikiAnalytics.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ