8ae7baafd7ef53b630951f8c568c04e0_NeikiAnalytics[.]exe

General

Target

8ae7baafd7ef53b630951f8c568c04e0_NeikiAnalytics.exe
Size

4.9MB
MD5

8ae7baafd7ef53b630951f8c568c04e0
SHA1

4a855f9a5051eacf84a6e8c1822e36bf97c6bb96
SHA256

545a7030d7d7a99c815d2020f514c057d3d9094819b2c67feb67e559f761d83d
SHA512

7295f3a2f360d5271affe37fa97f715f3bdcfa8e8f6a82ee6d57aee5af6d0eeb98c9dd4e1c96ba7a67783bd0de5e33404823be899f2dbd69c37821af52e373c4
SSDEEP

98304:GOqe/QcF20BPgz6ZHWzdJW0WFXuGrtceYWOdasLGNqCECCWQ3uyNMufK94xaM+bw:GOqqFfmJ5WZttui4CJwLN04x7U5+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
8ae7baafd7ef53b630951f8c568c04e0_NeikiAnalytics.exe
unpack001/out.upx

Files

8ae7baafd7ef53b630951f8c568c04e0_NeikiAnalytics.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 3.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 467KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 608KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 3.5MB

UPX1 Size: 4.5MB - Virtual size: 4.5MB

.rsrc Size: 467KB - Virtual size: 468KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 608KB - Virtual size: 608KB

.data Size: 33KB - Virtual size: 65KB

.pdata Size: 96KB - Virtual size: 95KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 5.1MB - Virtual size: 5.1MB

.reloc Size: 64KB - Virtual size: 63KB

UPX0
Size: - Virtual size: 3.5MB

UPX1
Size: 4.5MB - Virtual size: 4.5MB

.rsrc
Size: 467KB - Virtual size: 468KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 608KB - Virtual size: 608KB

.data
Size: 33KB - Virtual size: 65KB

.pdata
Size: 96KB - Virtual size: 95KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 5.1MB - Virtual size: 5.1MB

.reloc
Size: 64KB - Virtual size: 63KB