Extracted

• • Target

    eaa68eec176965801641b9cb43cc38b0_NeikiAnalytics.exe

  • Size

    84KB

  • MD5

    eaa68eec176965801641b9cb43cc38b0

  • SHA1

    bea419fa8e4ece975ff87450b85869f5505d2b6c

  • SHA256

    f39bd33dc90110a4aa2ef63ac586a2674e1f7b0b41f681b453cf45ecbb51b12d

  • SHA512

    d919f56cf8e7b9a39ca219a0355441d8a864477da9b95beb31d71da1aedd7c5b97dbfa1ae96688deec55923c9c06d5defc83e9ef63ddd241f387a6b6e50fa62a

  • SSDEEP

    1536:quxaLcWIRoxldNVXg7paE6a8cjXsrcJydi8gH:quxao9RGldzXkhBYIJyyH

  Score

  10^/10

  salitybackdoorupxevasiontrojan

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2