Behavioral task
behavioral1
Sample
89474b76fa567efc34dff744ff053e10_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
89474b76fa567efc34dff744ff053e10_NeikiAnalytics.exe
-
Size
326KB
-
MD5
89474b76fa567efc34dff744ff053e10
-
SHA1
aaea99066d88aa146c7c7b5fc5338692e68f5fa5
-
SHA256
2327fbf7c4b7cec434f6474b3a4e246158e8b6e9ec6fdea94750f0bdca3e7552
-
SHA512
be8be602492cb5f74d224e057788a375293b5261127314428b47ffa587b3ea3a3cb7e715f7bf4b601bec88014c8d85265071bda216d9ff8b87e4aafc33a7791a
-
SSDEEP
6144:BcjZgW8wFRTOjw7FsWR8PyRK/LbBxmajkGJBO/LF2xZPdZJFjx:yVWw7FsWePyRK/DfrhLL
Malware Config
Signatures
-
Urelas family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 89474b76fa567efc34dff744ff053e10_NeikiAnalytics.exe
Files
-
89474b76fa567efc34dff744ff053e10_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 295KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE