a5eb1a4190b923dd11c4a3767f35d3e89ee03b5e8859602595e2741f86e96d0b_NeikiAnalytics[.]exe

General

Target

a5eb1a4190b923dd11c4a3767f35d3e89ee03b5e8859602595e2741f86e96d0b_NeikiAnalytics.exe
Size

1.7MB
MD5

6fb122bd29e479a21f631795b80cda90
SHA1

7c636ad64c7be1f6c3cb9788f1b2bac474e46c85
SHA256

a5eb1a4190b923dd11c4a3767f35d3e89ee03b5e8859602595e2741f86e96d0b
SHA512

6dfa37c6059a6c1136d0e7ee70b9bc61b3d9223bc133f29ef0275665a23005926e2de99f1ea829db8a1e6ebe7796e75d8a1d69b20732e005a9682e82407bc5ec
SSDEEP

12288:ynImxXQSPkLcR2QYp/GUTqtWRN7SFRdO4obeJAN/WxBhv5vlKCDqtc3bu3gQkyK+:KxXhjRap/GUTpRtKKYqthwCKXmam

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5eb1a4190b923dd11c4a3767f35d3e89ee03b5e8859602595e2741f86e96d0b_NeikiAnalytics.exe

Files

a5eb1a4190b923dd11c4a3767f35d3e89ee03b5e8859602595e2741f86e96d0b_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

zip_archive_set_tempdir
zip_close
zip_delete
zip_dir_add
zip_discard
zip_error_code_system
zip_error_code_zip
zip_error_fini
zip_error_init
zip_error_init_with_code
zip_error_set
zip_error_system_type
zip_error_to_data
zip_fclose
zip_file_add
zip_file_get_comment
zip_file_get_external_attributes
zip_file_rename
zip_file_replace
zip_file_set_comment
zip_file_set_external_attributes
zip_fopen_index
zip_fopen_index_encrypted
zip_fread
zip_get_archive_comment
zip_get_name
zip_get_num_entries
zip_name_locate
zip_open
zip_open_from_source
zip_set_archive_comment
zip_set_default_password
zip_source_begin_write
zip_source_buffer
zip_source_buffer_create
zip_source_close
zip_source_commit_write
zip_source_error
zip_source_file
zip_source_file_create
zip_source_free
zip_source_function
zip_source_function_create
zip_source_keep
zip_source_make_command_bitmap
zip_source_open
zip_source_read
zip_source_rollback_write
zip_source_seek
zip_source_seek_compute_offset
zip_source_seek_write
zip_source_stat
zip_source_tell
zip_source_tell_write
zip_source_win32handle
zip_source_win32handle_create
zip_source_win32w
zip_source_win32w_create
zip_source_write
zip_stat_index
zip_stat_init
zip_unchange

Sections

UPX0
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

UPX1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 3.3MB

UPX1 Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 85KB - Virtual size: 88KB

UPX0
Size: - Virtual size: 3.3MB

UPX1
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 85KB - Virtual size: 88KB