Behavioral task
behavioral1
Sample
232b4db5499075da04ad0f1603cf1710_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
232b4db5499075da04ad0f1603cf1710_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
232b4db5499075da04ad0f1603cf1710_NeikiAnalytics.exe
-
Size
114KB
-
MD5
232b4db5499075da04ad0f1603cf1710
-
SHA1
a69e8235f1c9af90ae3e6e8223c9d28352301daa
-
SHA256
0f36a7479a6964400e4926e4260cb8e843a326b3d1e3ea0dbc6b872f7171df93
-
SHA512
80a5136fa36d6a6d1a03caf81db7316a5b796cab1dd2d47aec87af78273435b42e457222857bcc8f01be8a687f2f200bef89e36af14c308403335cd46c06f68b
-
SSDEEP
3072:hfAIuZAIuYSMjoqtMHfhfQE/MVAF8hRrnjRuKy+yMBTNZHbLy1EtuppYXYoAbwTs:hfAIuZAIuDMVtM/Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 232b4db5499075da04ad0f1603cf1710_NeikiAnalytics.exe unpack001/out.upx
Files
-
232b4db5499075da04ad0f1603cf1710_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ