Behavioral task
behavioral1
Sample
a6d8b6b81e8f813f0372f0b7eb400ec0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a6d8b6b81e8f813f0372f0b7eb400ec0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
a6d8b6b81e8f813f0372f0b7eb400ec0_NeikiAnalytics
-
Size
125KB
-
MD5
a6d8b6b81e8f813f0372f0b7eb400ec0
-
SHA1
b6c1d150a706b46b12340dac43bccdba4eec71ba
-
SHA256
5c3d501b786df476c8029febdf07ec7ef21fddc1881bb66bf87dff4c583d665e
-
SHA512
d676ca2e531a60b79c0b58d9bfabd5cb0896ad4cf758b4808f898c3b04ec3fe4d7168da29e0c2eb61a5bf3a2b7a41690869b3d802cd572676dc623b9c4f671cf
-
SSDEEP
3072:6hiBJIzTc0krvRuQ28q3AqDf913DtII2kH8IQQGGPyt5IA8uh:fBJIzTckWk91T2IzQQ/P4yK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a6d8b6b81e8f813f0372f0b7eb400ec0_NeikiAnalytics unpack001/out.upx
Files
-
a6d8b6b81e8f813f0372f0b7eb400ec0_NeikiAnalytics.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ