Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
41cd00ff704f73205c5137b37350f270_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
41cd00ff704f73205c5137b37350f270_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
41cd00ff704f73205c5137b37350f270_NeikiAnalytics
Size
4.9MB
MD5
41cd00ff704f73205c5137b37350f270
SHA1
050ca5cc2f2e59b130e6065bb8adeba57e77472a
SHA256
ec9a53c4ff7e73331ac6a2820d5cdee69d631f40a0f50f5edc66045725f1d8a1
SHA512
bfff6507433d2ecc3f8186670857dd1bc7c219e33ca7bf64ed76404a95429699571013589da3c78ce79b57c6ff30eefef50f5eac15e7041f81bc39b36b004ca2
SSDEEP
98304:UsaZazwk28rEI3BCmY8kocI8X3kocI8Xi:TzPhAKeEcpcK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ASEX_Model_String
ASEX_block_count
ASEX_boot_block_version
ASEX_caller_id
ASEX_check_bios_image
ASEX_customer
ASEX_date
ASEX_flash_size
ASEX_get_bios_image
ASEX_hardware_compatible_version
ASEX_initialize_bios_parameters
ASEX_logo
ASEX_major_version
ASEX_mb
ASEX_message
ASEX_minor_version
ASEX_product
ASEX_systemflag
ASEX_update_bios_firmware
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ