Behavioral task
behavioral1
Sample
34ab17b9e55c2d7455f8ecd2ace39ee0_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
34ab17b9e55c2d7455f8ecd2ace39ee0_NeikiAnalytics.exe
-
Size
3.7MB
-
MD5
34ab17b9e55c2d7455f8ecd2ace39ee0
-
SHA1
599378b3d8723ba0d85a699fde05f71f003fac08
-
SHA256
e3bc4c659158e277c281c7b92dd928219080003f2dd45e666c18806110659255
-
SHA512
af0ed0a72acb1974244bda621f5f5a09a64c7fda477f92138142d26bb1d3c88822b12afc919be1ab8297d74efb781da4fc23306c817efd710acc4f284566d8e5
-
SSDEEP
98304:8vK8jFVPqKVj9nyCMa8Asdk+C3neFYaObK164jpw:8v1VCCB6dvMqbObK16ew
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 34ab17b9e55c2d7455f8ecd2ace39ee0_NeikiAnalytics.exe
Files
-
34ab17b9e55c2d7455f8ecd2ace39ee0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 74KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ