Behavioral task
behavioral1
Sample
4df0ef6655cfc3d7696f740439571db0_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
4df0ef6655cfc3d7696f740439571db0_NeikiAnalytics.exe
-
Size
768KB
-
MD5
4df0ef6655cfc3d7696f740439571db0
-
SHA1
afd880e380a7a30cac065859aeb6fc5ad857a3dc
-
SHA256
04cf09d68bbc9b6e66be627b5ee48b550d7ad6421feb37f1218c0806afba0555
-
SHA512
a9c464f5bf95e71d3b81810a0876b40364807a93918538e86baf1ac0211b721158c6627c8e362512b64fabb91632b6018bda7389d27c17888245de07759c14d4
-
SSDEEP
24576:qW298E8ufgSRWPod2nRs4AKgzyw0ZN+pUdGOvCJw26cV/JKuylm69T:a98E8u4nAdJ4AKgzyw0ZN+pUdGECJwNZ
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4df0ef6655cfc3d7696f740439571db0_NeikiAnalytics.exe
Files
-
4df0ef6655cfc3d7696f740439571db0_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 219KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ