gffGetFormatInfo
gffGetPluginInfo
Behavioral task
behavioral1
Sample
67578787c0f462c5bc2b0458afcc0f70_NeikiAnalytics.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
67578787c0f462c5bc2b0458afcc0f70_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
67578787c0f462c5bc2b0458afcc0f70_NeikiAnalytics.exe
Size
26KB
MD5
67578787c0f462c5bc2b0458afcc0f70
SHA1
cfc32ce617c851c9bb94db196edef7364b098650
SHA256
505d0f655546e417496e93c92f1eef1b05b7da3ad5ba22e8a2babd4969f93d14
SHA512
3ff2eaa8a81c74a10f8d2ab23913c98bc224df5bdb718245d4b248ceb2c9e6906d3bd41004ca5921870aca9855f74592e583f3859aeb0b3d9bde8810d8ab1a12
SSDEEP
384:EBh7qQDbQCiFLXk06hIQAeu1T+ztAtlkO1aPMD/nIhrzovFz9Gdgy6CfcLd7:gxqQDbfiuhIMP2CO1aPMDS4vFhdLcQJ
Detects file using ACProtect software.
Processes:
resource | yara_rule |
---|---|
sample | acprotect |
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
67578787c0f462c5bc2b0458afcc0f70_NeikiAnalytics.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gffGetFormatInfo
gffGetPluginInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ