Behavioral task
behavioral1
Sample
692e985f10e55a97bfc900fe48c30290_NeikiAnalytics.exe
Resource
win7-20240215-en
General
-
Target
692e985f10e55a97bfc900fe48c30290_NeikiAnalytics.exe
-
Size
85KB
-
MD5
692e985f10e55a97bfc900fe48c30290
-
SHA1
d0ed7cabc5356fd55afc6df6ca6263351f70dcf8
-
SHA256
4c1b1920075564e92b470e26677023b97b0a7a5fbcca740d411f7dc41b2fb1bf
-
SHA512
fd1bd44a6585995aea941ba1ac3b1aa2ec9f5171854aaf235ef3123e54d08756396a9c9138a7d0cf0acb578b47cc2988b9fc1ecd8e0805c84cab4b15eb1d32d6
-
SSDEEP
768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmI:8vm1AeT7BVwxfvLFwjRI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 692e985f10e55a97bfc900fe48c30290_NeikiAnalytics.exe
Files
-
692e985f10e55a97bfc900fe48c30290_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE