1b72a391c3c100aebbe93c2a7c83c2e0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b72a391c3c100aebbe93c2a7c83c2e0_NeikiAnalytics.exe
Size

522KB
MD5

1b72a391c3c100aebbe93c2a7c83c2e0
SHA1

34ff5c27cbe723558116a17cb4f6df3552615965
SHA256

321f0e990e27f428b76854ca187dd6f63017be549192cc8bd8fe357e3ba074e6
SHA512

35ca241973140f4558b0ff6c1b73963fe2af7b619dea614e66dbd5149d1ec34e2e7233e8dff8bd5fefb4e4161ad2bda3c391f07f8dfb4bdcd61bcccfb0a016d0
SSDEEP

12288:VCwvwA9jgTR90rE6mLV4OmCaXdFhWy3JeOZmrsmNY0dcVen:noIc/cE54OmCaXpL5eOM1cV+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1b72a391c3c100aebbe93c2a7c83c2e0_NeikiAnalytics.exe
unpack001/out.upx

Files

1b72a391c3c100aebbe93c2a7c83c2e0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 904KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 418KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 506KB - Virtual size: 506KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ