c1df361e3969ce6b256146df11aa9b80_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1df361e3969ce6b256146df11aa9b80_NeikiAnalytics
Size

58KB
MD5

c1df361e3969ce6b256146df11aa9b80
SHA1

6e2f9d54d4f7ec1a9093d3e06b55b294c6cf6fe6
SHA256

7d3e6a5dff432e6cd3548a7c3ca1b08c6fbf2cb28b33903111995ec9f9ba28f9
SHA512

c9c10e1309df8f446c6ce619c133d45ef09de5417a2f2d8943ee78844f0511d0e5905d0d30e8e5138bb82b81f0ed34a3201a608fbe124364f046fb48141971b4
SSDEEP

768:qBwBUBvncnz3LjBuylJxYE8y9Z0nphG+YMlTv9RL5EAgg93vKGqy/u96TEKtb5Z/:HUBGjXk2fYfUOP5TlfCngk9yG4TD7MS

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
c1df361e3969ce6b256146df11aa9b80_NeikiAnalytics
unpack001/out.upx

Files

c1df361e3969ce6b256146df11aa9b80_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ