Behavioral task
behavioral1
Sample
51a161782b881aa204e2acb15db5c810_NeikiAnalytics.exe
Resource
win7-20240221-en
General
-
Target
51a161782b881aa204e2acb15db5c810_NeikiAnalytics.exe
-
Size
93KB
-
MD5
51a161782b881aa204e2acb15db5c810
-
SHA1
4925cf8c1bca0af5d07e3bb35913bda1001ef457
-
SHA256
7de43f308af0aac01ccaef8861e51ce88a5e72b126f6c87d25cef57a8205adba
-
SHA512
ae93b1c10d582c1a83a704de6e62d4805aa50464c19e4ae318a1389aab7ba64d18e287571920800d232db2eded8117d56d6e80f408b4be97f482ba24ca0b3ac5
-
SSDEEP
1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWprCh:8hOmTsF93UYfwC6GIout0fmCiiiXA6mA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51a161782b881aa204e2acb15db5c810_NeikiAnalytics.exe
Files
-
51a161782b881aa204e2acb15db5c810_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE