Behavioral task
behavioral1
Sample
23c7b6f39beb723595f3696e5de6ef10_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23c7b6f39beb723595f3696e5de6ef10_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
23c7b6f39beb723595f3696e5de6ef10_NeikiAnalytics.exe
-
Size
1.4MB
-
MD5
23c7b6f39beb723595f3696e5de6ef10
-
SHA1
74a1d8ced23932e7a4e87732d44f66467d5e2c39
-
SHA256
c65679447dc24736c62e7b1e08a2b1bda0af646aa528d5015eb72d7a89d2fa03
-
SHA512
5b4d447643be86fcb15afe8bd0c1b6045e499f514b61e2d65ee0019d9ecf5bb592f7d765b98fc780b4d1fc99e971f417c21727ce3a17a9ab5e4737a193a18638
-
SSDEEP
24576:KeyeWw5NJF4n0ML6kyMcDEqwks94Q6IosBgW7fsK6b22wX3YxOGg3wEW:hWcw29Mc4qwF94QE03fsK6b22wYxOVw9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 23c7b6f39beb723595f3696e5de6ef10_NeikiAnalytics.exe unpack001/out.upx
Files
-
23c7b6f39beb723595f3696e5de6ef10_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ