Behavioral task
behavioral1
Sample
2fec1f79671fcca34af462ed52870970_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
2fec1f79671fcca34af462ed52870970_NeikiAnalytics.exe
-
Size
772KB
-
MD5
2fec1f79671fcca34af462ed52870970
-
SHA1
1972c9f1068f55c6063663a97779edbeac9c9be0
-
SHA256
1f686762ccbc894f66c4dcc73de5d2dd419e09a7817c83390c5733e835a24cd7
-
SHA512
8b98f1dabf37ef10515e5dd2c428c75b4e9e656fe7e2069f665f9f32b46025225b6d93fbdad121c180c48948ccb07fb25b0c58fadafcb0c60b2c44ddf849cd14
-
SSDEEP
24576:qW298E8u2zKzvfcR+qmd6f5HpmwhNeZLLGDtEC5AoFhR4gNUagtu:a98E8uOKzHK+qmd6flpmkNeZ/GDtEC59
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fec1f79671fcca34af462ed52870970_NeikiAnalytics.exe
Files
-
2fec1f79671fcca34af462ed52870970_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 219KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ