Behavioral task
behavioral1
Sample
148cbbc6b57015127708168ad0edbc70_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
148cbbc6b57015127708168ad0edbc70_NeikiAnalytics.exe
-
Size
92KB
-
MD5
148cbbc6b57015127708168ad0edbc70
-
SHA1
fb61540e8b6cab5fc909a54b36ff0e4f8e7beb98
-
SHA256
057fcd58b91d546e7a2f4ae32a9d31c6c5b84abea56d99b5a7f0cfb6424c9760
-
SHA512
988b6e52c8ae8e4fbbeee23afbfb8af181aa5f79891b2dd972287de417f8c7ba7ae38980a8905a8508bb991b3210978352090736f37df0b9a8569cf839204d17
-
SSDEEP
1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpW4:8hOmTsF93UYfwC6GIout0fmCiiiXA6mH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 148cbbc6b57015127708168ad0edbc70_NeikiAnalytics.exe
Files
-
148cbbc6b57015127708168ad0edbc70_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE