Behavioral task
behavioral1
Sample
48cadbbcb7e84fe2974b048e4ea0a7c0_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
48cadbbcb7e84fe2974b048e4ea0a7c0_NeikiAnalytics.exe
-
Size
68KB
-
MD5
48cadbbcb7e84fe2974b048e4ea0a7c0
-
SHA1
565da88a75025a15f159a26565d1e83ad1556eba
-
SHA256
08e6f4df733617a15a8a6e3d13017f63a877986393d0c4fcef41a6af191645f4
-
SHA512
26f63eb47ceb79160d15ee64473dd404a5ff699eca17eadc003acc7b279a507ceaed75a7f560fd1ddf7e61a7992c4872feda0468b0f465f87f6f04be35684f98
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNYLIALUmYgPZ:khOmTsF93UYfwC6GIoutpY4ALUmVZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48cadbbcb7e84fe2974b048e4ea0a7c0_NeikiAnalytics.exe
Files
-
48cadbbcb7e84fe2974b048e4ea0a7c0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE