Behavioral task
behavioral1
Sample
6a112488457f1aa67ba8dd50f2d93410_NeikiAnalytics.exe
Resource
win7-20231129-en
General
-
Target
6a112488457f1aa67ba8dd50f2d93410_NeikiAnalytics.exe
-
Size
68KB
-
MD5
6a112488457f1aa67ba8dd50f2d93410
-
SHA1
a5468149b73ba304be31f3d0da28779bfb9dafd7
-
SHA256
24165456fb3b8b14f5f616aa755ea0cbd706cf9144df0574f040b0e0d6eae2fa
-
SHA512
d3e22e81799685963f6ad3ed2c78afc3f46c9106ca580208e5ea4189a266db2b47ccfaa50cb6f5c9f3debddd540541b59fe9b4c6f2b191ab6923bc4496ef418f
-
SSDEEP
1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNYLIALUmYgg:khOmTsF93UYfwC6GIoutpY4ALUmS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a112488457f1aa67ba8dd50f2d93410_NeikiAnalytics.exe
Files
-
6a112488457f1aa67ba8dd50f2d93410_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE