Behavioral task
behavioral1
Sample
1f180c2c3c88f5312b74b15de79e8f30_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1f180c2c3c88f5312b74b15de79e8f30_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1f180c2c3c88f5312b74b15de79e8f30_NeikiAnalytics
-
Size
6.8MB
-
MD5
1f180c2c3c88f5312b74b15de79e8f30
-
SHA1
2e5f1a6a21f0e08186a9d04a61eaa5e1b959862f
-
SHA256
e8c8ea0e186fa3e324ef7f84c63594a0237b29ad64711878d19b1d081a1aee78
-
SHA512
d423bc2811ab3d7fe531f9f848b684b66f578d9b4b99f8343eb5155b541d442bbbaa285709656b770af3894bc1a46da3dc3a1af6bbc37cb481df208ac3b19690
-
SSDEEP
98304:eJfCeeWOwgeDu9VU31lQLKT7BY0VcxNO9+4qF0NGDE0bDQmSkAr6VtlxxFt+/Yvv:eRTjgeqzA7B1cb8+U0xArCVFt+6KrKjF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 1f180c2c3c88f5312b74b15de79e8f30_NeikiAnalytics unpack001/out.upx
Files
-
1f180c2c3c88f5312b74b15de79e8f30_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ