Behavioral task
behavioral1
Sample
ace08e894403d1dc63dcd9b6c8fef870_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
ace08e894403d1dc63dcd9b6c8fef870_NeikiAnalytics.exe
-
Size
455KB
-
MD5
ace08e894403d1dc63dcd9b6c8fef870
-
SHA1
6caef567574f9eb0d70181765dd411d924f53941
-
SHA256
7434ffb991bd773686b19f4e3033b9eee9ff08e23af924d467abe45172e00907
-
SHA512
20da48e4c5a21cff174ddef9064b73c4acfec5f16e72fffb26186b434abedc43d4386dfb24efbc627c1d7ff061c7b88e84edb8ffceda9ceaa0b69a008ba4192b
-
SSDEEP
12288:y4wFHoS3eFp3IDvSbh5nPYERAAUDCa4NYmD:HFp3lz1XUDCaGYmD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ace08e894403d1dc63dcd9b6c8fef870_NeikiAnalytics.exe
Files
-
ace08e894403d1dc63dcd9b6c8fef870_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE