Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e550ff5183f85d599a6529d6c9a7f970_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e550ff5183f85d599a6529d6c9a7f970_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Target
e550ff5183f85d599a6529d6c9a7f970_NeikiAnalytics
Size
1.5MB
MD5
e550ff5183f85d599a6529d6c9a7f970
SHA1
f69323ad6c1721b6fda1a8a13d35a99603a121d5
SHA256
7311a31fa32003d435c6f440323b72f439340d7ef8b59bdb1afb642f8b59510a
SHA512
12d01994c5dc013a116092eff946aefd19e78460bb20448c87598d1d3075e5eedab7aa499b4fc44cded68273b2f4bce0b13132c0ec2b161b6de013c91edabdfe
SSDEEP
24576:4q5TfcdHj4fmb12q2jzKJ9TtrQB1iRIuawWI4FzQJ9TtFO85NVU/1awS+M:4UTsamJxF5TawD5G1awA
resource | yara_rule |
---|---|
sample | upx |
AutoIT scripts compiled to PE executables.
resource | yara_rule |
---|---|
static1/unpack001/out.upx | autoit_exe |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ