Behavioral task
behavioral1
Sample
8abafffa28a9574db8f8bc7651d8de7f9e538b7f671733a5b89de07bc4fe73d5_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8abafffa28a9574db8f8bc7651d8de7f9e538b7f671733a5b89de07bc4fe73d5_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
8abafffa28a9574db8f8bc7651d8de7f9e538b7f671733a5b89de07bc4fe73d5_NeikiAnalytics.exe
-
Size
46KB
-
MD5
8122a67afc87868b6b3c226791c1a540
-
SHA1
1de20e058e02687934bfdd811280633b43867194
-
SHA256
8abafffa28a9574db8f8bc7651d8de7f9e538b7f671733a5b89de07bc4fe73d5
-
SHA512
a33e9076e6d87a8f34337f6bfc7231ba2c12932008eda6697bf59db6ee2afc1199e8b1944f4d1714aff87cb232136f1a7554313c32bc08f9536049d2b75ba53a
-
SSDEEP
768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzm:CTWn1++PJHJXA/OsIZfzc3/Q8zxY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 8abafffa28a9574db8f8bc7651d8de7f9e538b7f671733a5b89de07bc4fe73d5_NeikiAnalytics.exe unpack001/out.upx
Files
-
8abafffa28a9574db8f8bc7651d8de7f9e538b7f671733a5b89de07bc4fe73d5_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ