Behavioral task
behavioral1
Sample
0e1ac35e51c1d7ea8e3a54ac55905ec0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
0e1ac35e51c1d7ea8e3a54ac55905ec0_NeikiAnalytics.exe
-
Size
328KB
-
MD5
0e1ac35e51c1d7ea8e3a54ac55905ec0
-
SHA1
7925067ba2ed1a8cd63f9771432340a4946ac9ec
-
SHA256
ce607851e31a4a76d97e4ebea76dbb6cf1c8898492a0a0d5f14768902e5f9182
-
SHA512
73658a7927df8c79506990752fdd60792d6e1dc91470a9698f9eedeb837b3f35ef3e5720560d3dfe2662b65bdb9c0bf50fb8737a81aa5eb875b780871cee9ba2
-
SSDEEP
6144:9cm4FmowdHoS4BftapTs8Hoo+6MjTVhRDu:/4wFHoS4d0G8HoljTVhRDu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e1ac35e51c1d7ea8e3a54ac55905ec0_NeikiAnalytics.exe
Files
-
0e1ac35e51c1d7ea8e3a54ac55905ec0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE