Behavioral task
behavioral1
Sample
b58458e730990361d2b15aad0eac3da0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b58458e730990361d2b15aad0eac3da0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
b58458e730990361d2b15aad0eac3da0_NeikiAnalytics.exe
-
Size
51KB
-
MD5
b58458e730990361d2b15aad0eac3da0
-
SHA1
fc2f43b8551d3cf8b1006b054230e6528d3e97ee
-
SHA256
12a8fd72a70b6b8fcf2bf010fb6cf5973bae6e4021a105501b417316f2e32d9d
-
SHA512
2b51f6fe6bfe33d6284301cc8c22ee91f8b3238cd7420a9578f0fe465e8012047710a7cb4b8bb8969eb5076f6d4d2f1940f28cf48f88d96883c2b82772ea1250
-
SSDEEP
1536:nNJb/HkwoLe29UjQ4wqQOLIMVnS3YEEEEEEEEEEEEEEEEEEEEEEn:b+LKSOLIMdgYEEEEEEEEEEEEEEEEEEEW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b58458e730990361d2b15aad0eac3da0_NeikiAnalytics.exe unpack001/out.upx
Files
-
b58458e730990361d2b15aad0eac3da0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ