36585287756435b7adb57b832e9f3f50_NeikiAnalytics[.]exe

General

Target
36585287756435b7adb57b832e9f3f50_NeikiAnalytics.exe
Size 28KB
Sample240528-g37vkshb4s
SHA256 cac4b675753ba5dc31a29fc2ebe88a3e7749b48d0eb1d0f575bc67be82b559b3
MD5 36585287756435b7adb57b832e9f3f50
SHA1 c0fa73105c425162a6716ee2785385a2aa185e42
SHA512 6de58c5d2bc60f01728f17025f8b7f334c58632db818007f292ab65625f7f99aab0d1dbc51c98014c2d4af8713ca486de35afc7d5cdf327d95e5bec5d88bba05
SSDEEP 384:qsaMPRsPPPcsPPPrsPPPOYM2PFW/kkdFzbfiEbU:EnvnwnOYM2c8CFzh
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36585287756435b7adb57b832e9f3f50_NeikiAnalytics.exe

SHA256 cac4b675753ba5dc31a29fc2ebe88a3e7749b48d0eb1d0f575bc67be82b559b3
MD5 36585287756435b7adb57b832e9f3f50
SHA1 c0fa73105c425162a6716ee2785385a2aa185e42
SHA512 6de58c5d2bc60f01728f17025f8b7f334c58632db818007f292ab65625f7f99aab0d1dbc51c98014c2d4af8713ca486de35afc7d5cdf327d95e5bec5d88bba05
SSDEEP 384:qsaMPRsPPPcsPPPrsPPPOYM2PFW/kkdFzbfiEbU:EnvnwnOYM2c8CFzh
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

104768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths