Behavioral task
behavioral1
Sample
97ab5eef903f0fce79ee82d07c36edc7119a82e481a0087a5d06b1a4fc3e2103_NeikiAnalytics.exe
Resource
win7-20240419-en
General
-
Target
97ab5eef903f0fce79ee82d07c36edc7119a82e481a0087a5d06b1a4fc3e2103_NeikiAnalytics.exe
-
Size
85KB
-
MD5
192268881792824a58b93ae99f6ef860
-
SHA1
7fc66c0558d6b42fec31f954d81129c71d155f64
-
SHA256
97ab5eef903f0fce79ee82d07c36edc7119a82e481a0087a5d06b1a4fc3e2103
-
SHA512
4f9072a6fd46eda7c459d42fbd69b86ee0845e299a5889c41f8629002f1d975daea9303083a28ced705203d2fe160c2358bb25105757b66e64e32b8c128430bd
-
SSDEEP
768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmf:8vm1AeT7BVwxfvLFwjRf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97ab5eef903f0fce79ee82d07c36edc7119a82e481a0087a5d06b1a4fc3e2103_NeikiAnalytics.exe
Files
-
97ab5eef903f0fce79ee82d07c36edc7119a82e481a0087a5d06b1a4fc3e2103_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE