f300cc7b25b3cc0767bacd55617efb90_NeikiAnalytics[.]exe

General

Target
f300cc7b25b3cc0767bacd55617efb90_NeikiAnalytics.exe
Size 3.2MB
Sample240519-tz2klsff5w
SHA256 4800634bc6e630962358d178d47050827938391efec2d1658a88c9575a961c3d
MD5 f300cc7b25b3cc0767bacd55617efb90
SHA1 ecf5e85d3089f557f155a1c4e7af2c4e00679262
SHA512 b468bf870983fc2d2af5cefe218806c4d7a57f088a58f3a7ffe17c2380e201198542150164b2a97329e47b9800b5da0771e1061586cb343d8f552a753158c092
SSDEEP 49152:Bjzc1Bx65LyLql32xfI2+D6gavP76nfpi0nj9q3j84qD0jBmx40dUctPZ5:1wY5Lgqlw/+DeeAkjoj+0jBmx40vP
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f300cc7b25b3cc0767bacd55617efb90_NeikiAnalytics.exe

File Explorer

f300cc7b25b3cc0767bacd55617efb90_NeikiAnalytics.exe

.exe 3.2MB

f300cc7b25b3cc0767bacd55617efb90_NeikiAnalytics.exe

SHA256 4800634bc6e630962358d178d47050827938391efec2d1658a88c9575a961c3d
MD5 f300cc7b25b3cc0767bacd55617efb90
SHA1 ecf5e85d3089f557f155a1c4e7af2c4e00679262
SHA512 b468bf870983fc2d2af5cefe218806c4d7a57f088a58f3a7ffe17c2380e201198542150164b2a97329e47b9800b5da0771e1061586cb343d8f552a753158c092
SSDEEP 49152:Bjzc1Bx65LyLql32xfI2+D6gavP76nfpi0nj9q3j84qD0jBmx40dUctPZ5:1wY5Lgqlw/+DeeAkjoj+0jBmx40vP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5963864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

132B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

632B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.themida

Size

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

f300cc7b25b3cc0767bacd55617efb90_NeikiAnalytics.exe

generic