Behavioral task
behavioral1
Sample
0a9e8f577bfa9d64af4f8fe2991817a0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
0a9e8f577bfa9d64af4f8fe2991817a0_NeikiAnalytics.exe
-
Size
58KB
-
MD5
0a9e8f577bfa9d64af4f8fe2991817a0
-
SHA1
ed98084cf3c39a0ba9b1c2c5a749adc8a26f04da
-
SHA256
2c453b2494ace6e61010cdc7d2bb6ddc401d1240d552c898ca53ae9a1034f92a
-
SHA512
d2a907a12fc84a2f20a89abedf365034e5ab168fd02aab2d0c537f873bb8904c44a5a674e3a9cab072a707df66bdf984e41b5a434e6c3f96b065528db96a9258
-
SSDEEP
768:mrItKyw5WHXfQmjIiIk9ecAaU896KyXmuJrjTg+5lPulNfffV:mr3Z5IfQmv81aU85yXmIjTg4GfffV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a9e8f577bfa9d64af4f8fe2991817a0_NeikiAnalytics.exe
Files
-
0a9e8f577bfa9d64af4f8fe2991817a0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 40KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE