4513c408efc97f0d826eab1a47deb8f0_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4513c408efc97f0d826eab1a47deb8f0_NeikiAnalytics.exe
Size

3.6MB
MD5

4513c408efc97f0d826eab1a47deb8f0
SHA1

02e0ee577956a421cd3fdd2cf61bb17e856fb6bf
SHA256

3d445620e4d242bd4d538e3e46dd18d2bf518bce175bab58530a486d6b1f117d
SHA512

3d7946d90744ebe466225611787717491b6534b41850fd8b0232093327af38a8169e14efb06eed5332d9cc9441800f4360bc6348c5493f8e7e8c9b2005cd8813
SSDEEP

98304:iTHZEOytt+br7ihIV+caKnDPWpFwBTR1A8IC:iTHZktMbremV+iDPW3wBFI

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4513c408efc97f0d826eab1a47deb8f0_NeikiAnalytics.exe

Files

4513c408efc97f0d826eab1a47deb8f0_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE