a0a6e916a586d31f77ee34a1739bbc10_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0a6e916a586d31f77ee34a1739bbc10_NeikiAnalytics
Size

3.5MB
MD5

a0a6e916a586d31f77ee34a1739bbc10
SHA1

ba27fcd0491388730492595a8a462ccf6864ac3f
SHA256

5d5383b4898f89aa19bc1cd9688494d5419846aab739f6ecdeb0e1993177f1fa
SHA512

068f911a8d20b36704001881572c2dda86b7fc9983b3c1465a4741335b92e0c8484c306232348a8b4a11fe953e33412a3a5fba51ab6ea9c63a3267a760db3848
SSDEEP

98304:KKYh/6YDsgG1DjEq+Cg2q6p9RqRdz98VRmhpRVuufZ5sy:KlVdgBZpg2ax8+7pZx

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
a0a6e916a586d31f77ee34a1739bbc10_NeikiAnalytics
unpack001/out.upx

Files

a0a6e916a586d31f77ee34a1739bbc10_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 665KB - Virtual size: 665KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 845KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ