Behavioral task
behavioral1
Sample
47fae0b48e812a255de77fbeb5820420_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
47fae0b48e812a255de77fbeb5820420_NeikiAnalytics.exe
-
Size
54KB
-
MD5
47fae0b48e812a255de77fbeb5820420
-
SHA1
deb1866533159f64767e5e8c9f02bb8f8a1f6aa7
-
SHA256
5ccc30484b6fea3e068f8c9fc9672547645093ea55f1c4e30ab7af7caf5c9cd7
-
SHA512
6c15719116288e997b0cfbdfbd54f44ffdf7fd99373839170c3733121cafdbb9fd99cc6fe579eed8088f65d7dd49d4ff6a1468b0461a43103ddf94436388357d
-
SSDEEP
384:+SDuuOFZyUVpULCgDb2prxVTw24iJ6Al6z+yX0f0BT2EpmuKowBpyUUep4+2yiiP:3DcZyUpULCgod/J96ayXv/pWnnAE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47fae0b48e812a255de77fbeb5820420_NeikiAnalytics.exe
Files
-
47fae0b48e812a255de77fbeb5820420_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE