CAST_start_operation
CAST_stop_operation
PyInit__raw_cast
Behavioral task
behavioral1
Sample
94c2de1c500bd9d319365900743efe00_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
94c2de1c500bd9d319365900743efe00_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
94c2de1c500bd9d319365900743efe00_NeikiAnalytics
Size
18KB
MD5
94c2de1c500bd9d319365900743efe00
SHA1
167edbffab27aacf51f7302429f5f1b7f0bb21ab
SHA256
9e85ada00ef538f1a4bb8a09ce4409a603820db038fca83dce194e2d23d8fba7
SHA512
cfb46b9494237a14f2f3c4fe315184decde21bb43b8cb7a76933123cb095b98f8f4f13bf2d8efe3c1bc8ba2ab8eb2b81dfc0d7977988b0592450326fa947d0eb
SSDEEP
384:O5WdfKZttl5rwR6Wd2MERAoG1Ft/QZaNJawcudoD7UUpWc:1OttliRn2MikDnbcuyD7UUpWc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94c2de1c500bd9d319365900743efe00_NeikiAnalytics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CAST_start_operation
CAST_stop_operation
PyInit__raw_cast
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE