1ef5fa1e0f9c1d312a14f484f2172840_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ef5fa1e0f9c1d312a14f484f2172840_NeikiAnalytics.exe
Size

39KB
MD5

1ef5fa1e0f9c1d312a14f484f2172840
SHA1

06924a457a4867cc2c7d15e9aa90f2a501bbf9e1
SHA256

2e47fe79119473b688afc5b6712ee03b460d3d5ecb6132e19c10eec69f3fe094
SHA512

8de6ba42bac6c44174971017e5b37f3de3b5066ce1e06b8cf812afe6e5223e28a795fe13d8a52c4d090f7d14f0eb66c52f2c018b09d426a3a349670d43aa4f68
SSDEEP

768:SVF3Cb9czkGoxDv7f/TQzRssMmP8pmP8yQzRss3:IFOCzkV3QzRssMm0pm0yQzRss

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ef5fa1e0f9c1d312a14f484f2172840_NeikiAnalytics.exe

Files

1ef5fa1e0f9c1d312a14f484f2172840_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 2KB - Virtual size: 2KB

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ