General

  • Target

    cf3e09bef6f2edc09d019ae7ae23ca60_NeikiAnalytics

  • Size

    1.2MB

  • MD5

    cf3e09bef6f2edc09d019ae7ae23ca60

  • SHA1

    1a14b7d2639dd79c9e994d0b0b50154533051cf9

  • SHA256

    283cdf597f0f1956b187870443ba3354efea512d72a52f56c535c61334c21b6a

  • SHA512

    841f18b0f9157f580a5eef4224d5d9350300b8d1f9d45f9c5583065fe3ade296b8895e38a046d37ca5d3f898c96b2a948a0ca8d9a8f5bf989e412579a1a4c596

  • SSDEEP

    24576:vsX2vzpbZGaKBVlEn+f3VgikCFkJ9k4i/izgNwMqfQN+Qfsqr:EGvz7GfY+f3VOCiJS46iwwMqqB0qr

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • cf3e09bef6f2edc09d019ae7ae23ca60_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86

    e160ef8e55bb9d162da4e266afd9eef3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    6b7d154c806f1e47db325229c300c6df


    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/ExentCtlInstaller.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $TEMP/SDM143/Free Ride Games.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/SDM143/Splash/loader1.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader2.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader3.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader4.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader5.jpg
    .jpg
  • $TEMP/SDM143/Splash/loader6.jpg
    .jpg
  • $TEMP/SDM143/Splasher.dll
    .dll windows:5 windows x86 arch:x86

    8926e573f4b66cfe7558e5db5a6688aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/SDM143/cmhelper.exe
    .exe windows:4 windows x86 arch:x86

    f5c5d75dcb7ff0affa88aae192f72bf4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/SDM143/resourceDll.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections