a3a3ead8bdcf9d33022545e64c674380_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3a3ead8bdcf9d33022545e64c674380_NeikiAnalytics.exe
Size

39KB
MD5

a3a3ead8bdcf9d33022545e64c674380
SHA1

749f9d2fe27aac1be38c8965963b010393c19590
SHA256

bc54cadec58a51ab38329e7f9f24edaef84a16c3b3cf4002ddefce7731534b8c
SHA512

2e314163a33d8fb2221c120bafe5c9b6a169990df28c33221d9a608b02386c20b40fef04bb256fd7e2bacbcb822d6d169d58c4514f2ce4e6c18316c5cade81dd
SSDEEP

768:SVF3Cz6kRwGKxrv7f9TQzRssMmP8pmP8yQzRss3:IFWRwndQzRssMm0pm0yQzRss

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3a3ead8bdcf9d33022545e64c674380_NeikiAnalytics.exe

Files

a3a3ead8bdcf9d33022545e64c674380_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 2KB - Virtual size: 2KB

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ