Behavioral task
behavioral1
Sample
152ce54299cea73d2dad55769b74a770_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
152ce54299cea73d2dad55769b74a770_NeikiAnalytics.exe
-
Size
169KB
-
MD5
152ce54299cea73d2dad55769b74a770
-
SHA1
d1c60b3fea941a80511458832b2aad5e5411f49b
-
SHA256
4f63a80b019bab3517d8412ecfdf7a1c8489589459726c46de10309b57eeef89
-
SHA512
4f1b5237e86fde7897be60c80b68b3c673668297e55eb57e91f7b0bebdc3e2413dc636b3fb3b56169b53eadd14c8591a7793a49321592ee7baa8fa0bf299d072
-
SSDEEP
1536:HvQBeOGtrYS3srx93UBWfwC6Ggnouy8CUYj7FK4O8A1o4XEc3YtxD8/Ai2T:HhOmTsF93UYfwC6GIoutX8Ki3c3YT8Vk
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 152ce54299cea73d2dad55769b74a770_NeikiAnalytics.exe
Files
-
152ce54299cea73d2dad55769b74a770_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE