Behavioral task
behavioral1
Sample
a314daf6f6207571059bebd04029b190_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a314daf6f6207571059bebd04029b190_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
a314daf6f6207571059bebd04029b190_NeikiAnalytics.exe
-
Size
32KB
-
MD5
a314daf6f6207571059bebd04029b190
-
SHA1
704d2a2c5af374a03f54b28b5c7d8478cfebe526
-
SHA256
582f0882984a2f8f97eccee8516ad8b5e081dc62e3dbf2f73d88c864de2f164e
-
SHA512
61f717c1e738a01a6d1ad3e973c487380a2fec4328769e06be8a37cada3a03e4ea3bf7d7c9b5257c5319c3bd23708e124eaaa4f747121bb31bbf08b0d808f546
-
SSDEEP
384:DbbkrRWSjubh9bJHupySeNvt0WzMudtoUKbQm:Dbbkrtju1uOdt48KUKx
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Processes:
resource a314daf6f6207571059bebd04029b190_NeikiAnalytics.exe unpack001/out.upx
Files
-
a314daf6f6207571059bebd04029b190_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE