Behavioral task
behavioral1
Sample
200cd33c0345cc8def04a58ab008f8ce7932bc63d8c9e65dd26c1ad90bec957a_NeikiAnalytics.exe
Resource
win7-20240611-en
General
-
Target
200cd33c0345cc8def04a58ab008f8ce7932bc63d8c9e65dd26c1ad90bec957a_NeikiAnalytics.exe
-
Size
3.7MB
-
MD5
71db7379f21d788ddadf29bbecd8ed00
-
SHA1
0b118fc36c858d916e8879136ebceab4caa45d6e
-
SHA256
200cd33c0345cc8def04a58ab008f8ce7932bc63d8c9e65dd26c1ad90bec957a
-
SHA512
27be683c60a9c4ed68f4bcc25e822db4fcecd61c9f9784b46caf76434b157d07c140d01e5d31de1c0d5524339ef4c2ee6c1d0f159ec976c8ee2c5c4579b38c34
-
SSDEEP
98304:dQSO9Q0JpKiD9rLlPWZqtUoM5buf5dOVOULBOB/o:daHJ8CRPwqtUoM5Sf5wVOjB/o
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 200cd33c0345cc8def04a58ab008f8ce7932bc63d8c9e65dd26c1ad90bec957a_NeikiAnalytics.exe
Files
-
200cd33c0345cc8def04a58ab008f8ce7932bc63d8c9e65dd26c1ad90bec957a_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 81KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 28KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ