Extracted

• • Target

    5ae82a1d38ea865ce176ef73077783c0_NeikiAnalytics.exe

  • Size

    292KB

  • MD5

    5ae82a1d38ea865ce176ef73077783c0

  • SHA1

    5c7451a8276e80fc566e7730ff112b9ac81c20a5

  • SHA256

    028b4e6c109c5070160d692a5d83665db3a7015f2f49f5e43105b1f8da8b5d58

  • SHA512

    ef359d85f875797a3ee209a3c0dc22eb2c22e2cb17899a0bc6b4a5b3c75f1fd1f442275d217bfe5e9f1a082dc4de7809fca0523e797548001e5ab2ea56251a36

  • SSDEEP

    3072:5vhN7q8fUjqkymdzu68Kmq+NxFwDiOLucEJZVfTmS:5LfUmkA68KH+NTw+Oq/JffTB

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2