Behavioral task
behavioral1
Sample
d2455368ec6b2b8ad238b5f70c7d6b50_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
d2455368ec6b2b8ad238b5f70c7d6b50_NeikiAnalytics.exe
-
Size
149KB
-
MD5
d2455368ec6b2b8ad238b5f70c7d6b50
-
SHA1
1fced3a52fec3a0d1a8dc27f5957fd05337749e7
-
SHA256
473a143992e66c610e862f0e0ee3a5a5dec6d94524e193628f5920d206d17b38
-
SHA512
333af17b9a8bbebdeeca4fcbebe502fd15b530ca2d06f9728b685cb970a87c49dbbf857128c8a8766536861401fbc05a36b40aafaacc2a4a3aeb240236e5890c
-
SSDEEP
3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4t7:kcm4FmowdHoSphraHcpOFltH4t7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2455368ec6b2b8ad238b5f70c7d6b50_NeikiAnalytics.exe
Files
-
d2455368ec6b2b8ad238b5f70c7d6b50_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE