ramnit | 7b54aac16c5deb72a867e8294b0081b0_NeikiAnalytics[.]exe

General

Target
7b54aac16c5deb72a867e8294b0081b0_NeikiAnalytics.exe
Size 64KB
Sample240531-hhtmwsac6w
SHA256 12ac306fa3249e7afc30319e335840258d88ab4b496745b45ff4824062af7222
MD5 7b54aac16c5deb72a867e8294b0081b0
SHA1 a3f0d5277963d9e974d16d37f553e3193b9ca4bf
SHA512 66f78c990d55a062e5f6d078f6c89404aee6b8e5bc64f5757e85664172142354ce9b1805b204454995cd6cd08668525df411591226063f9ca3aa55b3ddafeb9b
SSDEEP 768:efqa3HYbAumgqIOtnToIf1rF1eL8tAimCLZIKUDWsW29:mqa3YbAuqIOtnToIft3+oTcbE2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx ramnit

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b54aac16c5deb72a867e8294b0081b0_NeikiAnalytics.exe

SHA256 12ac306fa3249e7afc30319e335840258d88ab4b496745b45ff4824062af7222
MD5 7b54aac16c5deb72a867e8294b0081b0
SHA1 a3f0d5277963d9e974d16d37f553e3193b9ca4bf
SHA512 66f78c990d55a062e5f6d078f6c89404aee6b8e5bc64f5757e85664172142354ce9b1805b204454995cd6cd08668525df411591226063f9ca3aa55b3ddafeb9b
SSDEEP 768:efqa3HYbAumgqIOtnToIf1rF1eL8tAimCLZIKUDWsW29:mqa3YbAuqIOtnToIft3+oTcbE2
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

164240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths