0e6ad03679e9cf2c2df94f07aa017880_NeikiAnalytics[.]exe

General

Target
0e6ad03679e9cf2c2df94f07aa017880_NeikiAnalytics.exe
Size 639KB
Sample240603-2x6esada68
SHA256 bb3d27aa434b98ade80cb1034e9f28a5b7a5bd0d72a361a10bd48be4022eb65f
MD5 0e6ad03679e9cf2c2df94f07aa017880
SHA1 854c73c344210764df2c53187e2949685b478a76
SHA512 beb17fa69e43d4bf81bb81db73baa71b065c59e12c65ded07a28d9c2407e0b8c73dcb1c6960adfc0cdea16639cec3244daa91d7b83dc206c17c4ef9f7254d505
SSDEEP 12288:0EQoS8nnKC49l1zmI8cDEbofE64hzGPEFmA7M+mTfWyrBglmExsoesE2Kxh9IJ:07R97z+AgoOhqM7mHSmExsorKNIJ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e6ad03679e9cf2c2df94f07aa017880_NeikiAnalytics.exe

SHA256 bb3d27aa434b98ade80cb1034e9f28a5b7a5bd0d72a361a10bd48be4022eb65f
MD5 0e6ad03679e9cf2c2df94f07aa017880
SHA1 854c73c344210764df2c53187e2949685b478a76
SHA512 beb17fa69e43d4bf81bb81db73baa71b065c59e12c65ded07a28d9c2407e0b8c73dcb1c6960adfc0cdea16639cec3244daa91d7b83dc206c17c4ef9f7254d505
SSDEEP 12288:0EQoS8nnKC49l1zmI8cDEbofE64hzGPEFmA7M+mTfWyrBglmExsoesE2Kxh9IJ:07R97z+AgoOhqM7mHSmExsorKNIJ
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

105216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths