ede1a1e465496ee1731dd8d845554280_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ede1a1e465496ee1731dd8d845554280_NeikiAnalytics.exe
Size

4.1MB
MD5

ede1a1e465496ee1731dd8d845554280
SHA1

ae00a31094b0c54e72dd414d0cc4de4183be716a
SHA256

b9750f832b0accec38479e172aba447e2fa3f64668d9ca0e6dea5ef44e120102
SHA512

d405368a3cdfdaf854156255dd29ea7c4e2c064244e380eda1a7d1a195327fbd94781c1a296f06a4646307c399b590cd46a3105027ced0fe7284e618915ab302
SSDEEP

98304:2mOslRu/cTAiviracxa8X8Xr0QndCnTt1P8JgMQ5gfM:2mOQkeV6rDxEXn4x1U+5+M

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ede1a1e465496ee1731dd8d845554280_NeikiAnalytics.exe

Files

ede1a1e465496ee1731dd8d845554280_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

_cgo_dummy_export
av_frame_alloc
av_frame_free
av_free
av_free_packet
av_get_channel_layout_nb_channels
av_get_default_channel_layout
av_init_packet
av_lockmgr_register
av_opt_set_int
av_opt_set_sample_fmt
av_read_frame
av_register_all
av_rescale_q
av_rescale_rnd
avcodec_close
avcodec_decode_audio4
avcodec_find_decoder
avcodec_open2
avformat_close_input
avformat_find_stream_info
avformat_open_input
qweqwe
swr_alloc
swr_convert
swr_free
swr_get_delay
swr_init

Sections

Size: 886KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 90KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 853KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 190KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 467B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 197B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 21B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 61KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.exports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.themida
Size: - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: 886KB - Virtual size: 2.2MB

Size: 90KB - Virtual size: 210KB

Size: 853KB - Virtual size: 1.9MB

Size: - Virtual size: 190KB

Size: 467B - Virtual size: 798B

Size: 197B - Virtual size: 2KB

Size: 21B - Virtual size: 44B

Size: 6B - Virtual size: 8B

Size: 61KB - Virtual size: 91KB

.exports Size: 1024B - Virtual size: 4KB

.imports Size: 512B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.themida Size: - Virtual size: 3.9MB

.boot Size: 2.3MB - Virtual size: 2.3MB

.reloc Size: 16B - Virtual size: 4KB

.exports
Size: 1024B - Virtual size: 4KB

.imports
Size: 512B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.themida
Size: - Virtual size: 3.9MB

.boot
Size: 2.3MB - Virtual size: 2.3MB

.reloc
Size: 16B - Virtual size: 4KB