Behavioral task
behavioral1
Sample
845aec59135905d01d72eadd9f2068e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
845aec59135905d01d72eadd9f2068e0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
845aec59135905d01d72eadd9f2068e0_NeikiAnalytics
-
Size
468KB
-
MD5
845aec59135905d01d72eadd9f2068e0
-
SHA1
f34894ff99c93c977be59728faf0dad5d4c8f378
-
SHA256
ffccd1c5d9a110852341bbc8b6d58e2dec58155f3617937f7770d1b320920e9c
-
SHA512
81fdaeeeb059634ca4452231b329c4f6a683932b2b213ee0270121f6032363f694dbfcd6653427dd616401f311b523b8fe862923221e02584d5eafdd0dfa82bb
-
SSDEEP
6144:f2xKq+q9ILPlAvU/xe2FRxhG70c6TcaiwIVMKyo1TwEZz2es9WXovy1YbJMRzCHa:+GrFdZiXvw7HVLJMRY+eI1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 845aec59135905d01d72eadd9f2068e0_NeikiAnalytics unpack001/out.upx
Files
-
845aec59135905d01d72eadd9f2068e0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE