Behavioral task
behavioral1
Sample
b3b7b17e56e128ecc3058106f43aeca0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b3b7b17e56e128ecc3058106f43aeca0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
b3b7b17e56e128ecc3058106f43aeca0_NeikiAnalytics
-
Size
12KB
-
MD5
b3b7b17e56e128ecc3058106f43aeca0
-
SHA1
50fb9da8784649839d95c6e9c9132c945c4e7ebf
-
SHA256
f63c2a31ab35d375aa496971c977d22432ca3ddbccca3c499e7a6f17b9dcfde8
-
SHA512
e7875c39f6f17ef3658c58dd6c19897c4edfccf8bae39ac42fbcac0527b1c024142d5dfab84caac8effa1f1d268e143d6bdf6ab9f8b9f0e2e3f145843e7c686a
-
SSDEEP
192:+UoHtBBPR/wn3VGswB1ZztrM5gwX/wJlB5rC/42oq+vLtr9ZCspE+TMgrZMVP:Hk6g7trW54DLdAeMvVP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b3b7b17e56e128ecc3058106f43aeca0_NeikiAnalytics unpack001/out.upx
Files
-
b3b7b17e56e128ecc3058106f43aeca0_NeikiAnalytics.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ