411aa79fa534a9f41ef7a2085e0d4400_NeikiAnalytics[.]exe | Triage

Sharing

General

Target

411aa79fa534a9f41ef7a2085e0d4400_NeikiAnalytics.exe
Size

80KB
MD5

411aa79fa534a9f41ef7a2085e0d4400
SHA1

9912756304de66c34f19d8d58bfe5798f0a07bdb
SHA256

3be72f2c580d145a3399f5636b5d446f769c84792334d2d9274d73956c5fdbaf
SHA512

77079d5398eac298d7322d73cebecb80a200bd1d586497e432099d58b9607549b06710ce5adb755c907c1e1c63b636a7f6f3b09e04d99b0c207e92b1b5fb6c6e
SSDEEP

768:NApCFyDj9T2uHUfXUI6/NBFA90IMqlmpVAUAs9RThyQiDX1RCgh2QbI9q7gqNVxm:+nhquHUfi/y0Iag2TUHl4OqrCO3

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
411aa79fa534a9f41ef7a2085e0d4400_NeikiAnalytics.exe

Files

411aa79fa534a9f41ef7a2085e0d4400_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE