ramnit | 689f0af4ec967f14b7f253377bc6c970_NeikiAnalytics[.]exe

General

Target
689f0af4ec967f14b7f253377bc6c970_NeikiAnalytics.exe
Size 64KB
Sample240530-hdt3vsae68
SHA256 0afabfaf67ea82468da35bad5e82d94b8b0701bc23d939e5b774e1cae2a5c05e
MD5 689f0af4ec967f14b7f253377bc6c970
SHA1 854b4a76ab1515353944c27257a55ee949d99150
SHA512 1824adc4dfe36bdb1bc3713d1dc8ea49eae9fab0595d126b174e20d8a1f893c88982150c9c7d41e4b7d465367b854a9330af6e394002ce4ec2859c68bcc06b87
SSDEEP 768:efqa3HYbAumgqIOtnToIf1rF1eL8tAimCLZIKUDWsW29:mqa3YbAuqIOtnToIft3+oTcbE2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx ramnit

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
689f0af4ec967f14b7f253377bc6c970_NeikiAnalytics.exe

SHA256 0afabfaf67ea82468da35bad5e82d94b8b0701bc23d939e5b774e1cae2a5c05e
MD5 689f0af4ec967f14b7f253377bc6c970
SHA1 854b4a76ab1515353944c27257a55ee949d99150
SHA512 1824adc4dfe36bdb1bc3713d1dc8ea49eae9fab0595d126b174e20d8a1f893c88982150c9c7d41e4b7d465367b854a9330af6e394002ce4ec2859c68bcc06b87
SSDEEP 768:efqa3HYbAumgqIOtnToIf1rF1eL8tAimCLZIKUDWsW29:mqa3YbAuqIOtnToIft3+oTcbE2
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

164240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths