7723ecdaa7848d9749ab4a5a1878f0b0_NeikiAnalytics | Triage

Sharing

General

Target

7723ecdaa7848d9749ab4a5a1878f0b0_NeikiAnalytics
Size

8KB
MD5

7723ecdaa7848d9749ab4a5a1878f0b0
SHA1

3233aed74a7e8867cdd013db464e2ffc02b269a8
SHA256

a11b40f95a5718651867a18797eef2a04049ea5e0f643b92ee7750a40ff6c41c
SHA512

3c6c731445ae0700a6a7ac19646cb91230d88b1a99f327eb929e3f15284c15221a43657c92dfe79b51d0946237ddd28c569d517a06aaffd847cb917be551c8b6
SSDEEP

192:IFsXvZsk3d/ZcfFaQZT6CSJB8Oye3Q4pagU5lLf:asX7d/ZctaQZT6CSB8Oye3Q4K5pf

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7723ecdaa7848d9749ab4a5a1878f0b0_NeikiAnalytics
unpack001/out.upx

Files

7723ecdaa7848d9749ab4a5a1878f0b0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ