Behavioral task
behavioral1
Sample
87bdaaa3f0ef741b4298c74b2bd0d270_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
87bdaaa3f0ef741b4298c74b2bd0d270_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
87bdaaa3f0ef741b4298c74b2bd0d270_NeikiAnalytics.exe
-
Size
2.8MB
-
MD5
87bdaaa3f0ef741b4298c74b2bd0d270
-
SHA1
dbc2f1f8dd21d5f02c6080f86b6aa063232181a8
-
SHA256
6e9a7a2507dd8de9e7eef6ae7ba03466e9895271fc2e04cad3397104aab60db7
-
SHA512
eea11f534e4136fa8732f892d1965e2c3e3e716c5f8138bc711c441fdf34a030f952e1e713abe85fe1d671940e9f299a945fb5d3949ea416924cb89f0db9b68d
-
SSDEEP
49152:00bFmU0GV9JV4IyZOk/RtDHOcxrRPbijYfmyCVK5zij1I10O++UssBURIWwbkNRR:wU0G1VukStbOcdRPbiMoK5eW3++nujk9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 87bdaaa3f0ef741b4298c74b2bd0d270_NeikiAnalytics.exe unpack001/out.upx
Files
-
87bdaaa3f0ef741b4298c74b2bd0d270_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.htext Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE