Behavioral task
behavioral1
Sample
aba3a2f6bad9bc9f0a4564787a3763b0_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
aba3a2f6bad9bc9f0a4564787a3763b0_NeikiAnalytics.exe
-
Size
93KB
-
MD5
aba3a2f6bad9bc9f0a4564787a3763b0
-
SHA1
1e882c8a6cc37dc708523f508b4234f9a08760a9
-
SHA256
9ca03f58931ca2e4ef0f6d1c19144ab919799a1e4efba676c9605f98dea8254d
-
SHA512
0bbbb2fb24fa0adc2302c66bffd9d6221e5dec6879a57097dc8cbbb6689c9cdfff321ffb12d1e57323fd20b5a8e85f4ec89303e2024e77c35f9ae86cdf6fcd8b
-
SSDEEP
1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWprC/:8hOmTsF93UYfwC6GIout0fmCiiiXA6mq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aba3a2f6bad9bc9f0a4564787a3763b0_NeikiAnalytics.exe
Files
-
aba3a2f6bad9bc9f0a4564787a3763b0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE