Behavioral task
behavioral1
Sample
1c278579c980dfc525010c739a9f60e987612bc6f2cf9ec254d53f2597dd167b_NeikiAnalytics.exe
Resource
win7-20240508-en
General
-
Target
1c278579c980dfc525010c739a9f60e987612bc6f2cf9ec254d53f2597dd167b_NeikiAnalytics.exe
-
Size
5.1MB
-
MD5
6badfef9b2ebcbdbba4e1f5d348549f0
-
SHA1
a6d714463f9dd51a8302db9cf26b4ac07163d3f0
-
SHA256
1c278579c980dfc525010c739a9f60e987612bc6f2cf9ec254d53f2597dd167b
-
SHA512
43cc3359e069d7e3110d2e95b24b4bc550a82f2d1c6cdf866f3508943eed85a0bd0f80e96dfc1e4971cca1503aec48d697deb90aee0087911ec6fae91e51ab0f
-
SSDEEP
98304:h+2Xq3oHQhWFpbnkV7pSWOhOlfmCBKbjpIC+f+WhWNOhSkob:h+2XLQUbaLOhOluCB4SXf+WWN7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c278579c980dfc525010c739a9f60e987612bc6f2cf9ec254d53f2597dd167b_NeikiAnalytics.exe
Files
-
1c278579c980dfc525010c739a9f60e987612bc6f2cf9ec254d53f2597dd167b_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 13.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE