Behavioral task
behavioral1
Sample
acde7e98ae86fc6440a665d6c0676d30_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
acde7e98ae86fc6440a665d6c0676d30_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
acde7e98ae86fc6440a665d6c0676d30_NeikiAnalytics.exe
-
Size
147KB
-
MD5
acde7e98ae86fc6440a665d6c0676d30
-
SHA1
d9f43a4a2ef7107b938fdc84b5f9440abc8e819c
-
SHA256
76be98bf67e28ab212f896a789e0f742f9dcb93df93ab6b63d9b09aed8521568
-
SHA512
2d6629b9c31729eab05af7133e296f597110ebaa6dd3561758308c54674a23b5837037ca414b0abdf81e3b236a45b1808052bfce74c89484457a1b9ca59c5bc9
-
SSDEEP
768:yF9jPu4yBNL64rgj7O8fzi1mB28yz2gXgi2F2Tbq9QEJZOYQvinwVf+h1MylSEaq:ejPzy7rAVb3n3gX72IEJ5NwE4G/a3p/c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource acde7e98ae86fc6440a665d6c0676d30_NeikiAnalytics.exe unpack001/out.upx
Files
-
acde7e98ae86fc6440a665d6c0676d30_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ