Behavioral task
behavioral1
Sample
671ab578608d3ccf4cd19b2ad2bda850_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
671ab578608d3ccf4cd19b2ad2bda850_NeikiAnalytics.exe
-
Size
120KB
-
MD5
671ab578608d3ccf4cd19b2ad2bda850
-
SHA1
3612c83454998d4de0260c5d79ba7c3481c8c048
-
SHA256
b012e9dd260dbf06dcf017a72c6ecccbcde039c8298c697f9b6ed6152ea14e2d
-
SHA512
dd8c406c3542ac0ef3f0e36b408ce6452542d0e4ccbc13a66b12181cffd958c17793c5e9ad949d8c9805b8fbd703ef412c5f4c1482cee1bb159da52c419c037f
-
SSDEEP
3072:/hOmTsF93UYfwC6GIoutKzdbr9XcMRwk6mNb5TcPeJipUPe:/cm4FmowdHoSKZf5cX5m7TNG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 671ab578608d3ccf4cd19b2ad2bda850_NeikiAnalytics.exe
Files
-
671ab578608d3ccf4cd19b2ad2bda850_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vryeypb Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE