68bad9d5e2631e2f6b03be9ea075a9132c61ddf2257c7d912c16e6e8eff304d6_NeikiAnalytics[.]exe

General

Target

68bad9d5e2631e2f6b03be9ea075a9132c61ddf2257c7d912c16e6e8eff304d6_NeikiAnalytics.exe
Size

3.3MB
MD5

b452117b5cd5ab487e3c264f25497950
SHA1

2d9ae21dae76dff39f222a6542e4067883cfa4d4
SHA256

68bad9d5e2631e2f6b03be9ea075a9132c61ddf2257c7d912c16e6e8eff304d6
SHA512

588b4430af98876bde8b8275463124493bf1393d85ce2345494e42991ceb92609da4de37ba2214b92040eefab1a0e88ac9eb2a3756de52b8b3e819de758f7c94
SSDEEP

98304:vEsskOYX/3YrGoxXC2XGaNQSzdI0nl3ORV+v6KHciiZl1:7skvPIrG8jGaySrOSc1

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
68bad9d5e2631e2f6b03be9ea075a9132c61ddf2257c7d912c16e6e8eff304d6_NeikiAnalytics.exe
unpack001/out.upx

Files

68bad9d5e2631e2f6b03be9ea075a9132c61ddf2257c7d912c16e6e8eff304d6_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.7MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 2.7MB

UPX1 Size: 3.3MB - Virtual size: 3.3MB

UPX2 Size: 512B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 1.9MB - Virtual size: 1.9MB

.data Size: 1.7MB - Virtual size: 1.8MB

.idata Size: 1024B - Virtual size: 988B

.reloc Size: 91KB - Virtual size: 90KB

.symtab Size: 512B - Virtual size: 4B

UPX0
Size: - Virtual size: 2.7MB

UPX1
Size: 3.3MB - Virtual size: 3.3MB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 1.7MB - Virtual size: 1.8MB

.idata
Size: 1024B - Virtual size: 988B

.reloc
Size: 91KB - Virtual size: 90KB

.symtab
Size: 512B - Virtual size: 4B