Behavioral task
behavioral1
Sample
1d343c6eef66f227b9e0b6993c465290_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1d343c6eef66f227b9e0b6993c465290_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1d343c6eef66f227b9e0b6993c465290_NeikiAnalytics
-
Size
157KB
-
MD5
1d343c6eef66f227b9e0b6993c465290
-
SHA1
fe3b6c49bf3bb5473f6a14abeba90fe95503abf1
-
SHA256
915687f47af4705282b4e81cce0f04aa47560bbcb39ce3a76d13cd06e232f80f
-
SHA512
f187786654fd1fa09f36b33aa9fe86bd1304c0c08fff766b488f3a6e93e34ee6d4f8aa1a1f0840b36c734de802ef78f9476ae66b924be8dc640ea9a9760c1680
-
SSDEEP
3072:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuFD5o1jSgn5+lwCRlCh+YiiaWg5EeHXDgke0:KQSo1EZGtKgZGtK/CAIuZAIuFo1/Htar
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1d343c6eef66f227b9e0b6993c465290_NeikiAnalytics unpack001/out.upx
Files
-
1d343c6eef66f227b9e0b6993c465290_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ