Behavioral task
behavioral1
Sample
241cd47618908f30abe58a7bb13886c0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
241cd47618908f30abe58a7bb13886c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
241cd47618908f30abe58a7bb13886c0_NeikiAnalytics.exe
-
Size
3.7MB
-
MD5
241cd47618908f30abe58a7bb13886c0
-
SHA1
19d55a8721221d2db6cfaafc98539a8d7a5bd821
-
SHA256
67daf382a201d49bc7707a44d03312c76bf0e64566493cc5ae98f4b043e27715
-
SHA512
33a2f67e0de679ee81ef3cdab7207e927e0c408e6981eada3a43f1e7d8dd65ce32f262c70d899763f318f492e0094261c626b2a081e3623e981e26d642e5cdfa
-
SSDEEP
49152:K/CJaSeHz2UXUZdvOFGF0aHo/QngV/n4nY28lop6fU:eSSeBOW0SmQnJYVq4U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 241cd47618908f30abe58a7bb13886c0_NeikiAnalytics.exe unpack001/out.upx
Files
-
241cd47618908f30abe58a7bb13886c0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ