Behavioral task
behavioral1
Sample
1bd0559f362713dc404e9b55d33de9f0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
1bd0559f362713dc404e9b55d33de9f0_NeikiAnalytics.exe
-
Size
326KB
-
MD5
1bd0559f362713dc404e9b55d33de9f0
-
SHA1
41d1435b7b06e3c95df018d3e1dbebea568dd7c1
-
SHA256
10d1130c63336d37e14f6eb591ca41722c82dfe03eecd08eb2fa96bd6eb184ce
-
SHA512
813f2d033bbdf55e824280cc33748009c4b1ae761daf53e9dbe698cbc73e299277f42cd9c33dc68d10c129c7bba784e478c5e8565572fd1ab53f8123311b42c0
-
SSDEEP
6144:xDKHpICd4Gp9r6zedtFUWLTEsniHLrFPjHeYrBO/LF2xZPdZJFjx:pKJz2edtFUWEsniHt3rhLL
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bd0559f362713dc404e9b55d33de9f0_NeikiAnalytics.exe
Files
-
1bd0559f362713dc404e9b55d33de9f0_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 295KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE