Behavioral task
behavioral1
Sample
51b32676d1365834a2df4236fe2a1e80_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
51b32676d1365834a2df4236fe2a1e80_NeikiAnalytics.exe
-
Size
277KB
-
MD5
51b32676d1365834a2df4236fe2a1e80
-
SHA1
ee6759e75f6872b5fafd73db88e19060ebe002f4
-
SHA256
29a6b482c07880cdaa30ed6bdaf989fd0b61da7745d2f3feab16eb15ebd2a8d0
-
SHA512
7d733c3be2e8e8ca5a04ec077ad092073010477f6573d1c315df62174ac40e4a47d748b6382e629f933deeff654e4417687c95c1bc1bcd62b37c9a5dbf918ceb
-
SSDEEP
6144:u/37IOU9CztY2tBKRIH/guzuzlo9um0BS/2egTQnY14coU7Q2+LDHebbJ+:qJU9CVBqcgUaor0ByIYaQ2
Malware Config
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51b32676d1365834a2df4236fe2a1e80_NeikiAnalytics.exe
Files
-
51b32676d1365834a2df4236fe2a1e80_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
476f92c8f9ddbcb805cdc5c61fbc5635
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtContinue
Sections
Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ