17a879b03076531eb5b4d727e97f41e0_NeikiAnalytics[.]exe

General

Target
17a879b03076531eb5b4d727e97f41e0_NeikiAnalytics.exe
Size 107KB
Sample240522-eegmdabc91
SHA256 5b238a3ba55d8c5d40ccea94a09cee393d3700cf1f46799bc921c72cdd234f92
MD5 17a879b03076531eb5b4d727e97f41e0
SHA1 87a934717665f3e4ed6712bbd6eec7050cb4928c
SHA512 09e5a5ee40a1693e274c9e9b9787843ea14ed37ac3e6328c4b882dd8c731f3d08ad698e990c5eee701f55a4c26ff388d092b362fc0d20379a64c34d3080d7f07
SSDEEP 3072:khOmTsF93UYfwC6GIoutpYcvrqrE66krop7Bcgw:kcm4FmowdHoSphraHcp7yV
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a879b03076531eb5b4d727e97f41e0_NeikiAnalytics.exe

SHA256 5b238a3ba55d8c5d40ccea94a09cee393d3700cf1f46799bc921c72cdd234f92
MD5 17a879b03076531eb5b4d727e97f41e0
SHA1 87a934717665f3e4ed6712bbd6eec7050cb4928c
SHA512 09e5a5ee40a1693e274c9e9b9787843ea14ed37ac3e6328c4b882dd8c731f3d08ad698e990c5eee701f55a4c26ff388d092b362fc0d20379a64c34d3080d7f07
SSDEEP 3072:khOmTsF93UYfwC6GIoutpYcvrqrE66krop7Bcgw:kcm4FmowdHoSphraHcp7yV
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

149056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths