0c9d08cbeeba226ede019218f02de4d0_NeikiAnalytics[.]exe

General

Target
0c9d08cbeeba226ede019218f02de4d0_NeikiAnalytics.exe
Size 1.6MB
Sample240608-yp65kagb99
SHA256 5a34d3d76f3d92e7622a525de1a7cd316e629057335d96a4965d3399592aec31
MD5 0c9d08cbeeba226ede019218f02de4d0
SHA1 9406024db726f013245c8457c89703bcf37078aa
SHA512 537860f47b02162e40310b36985812d05ff719ce277ea8dd0ea0c267604ea7e8abd07aa9a3a75562cf18f78ef0bb88dfa3a3bfec3315d2f2c926ba966d434695
SSDEEP 49152:X1PbpubQGl5XCWoCiVhNmOSozKFWjNU+6huWKyBdzfU:X1s7l5yWoCiVhTKFCU35Bdzs
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c9d08cbeeba226ede019218f02de4d0_NeikiAnalytics.exe

SHA256 5a34d3d76f3d92e7622a525de1a7cd316e629057335d96a4965d3399592aec31
MD5 0c9d08cbeeba226ede019218f02de4d0
SHA1 9406024db726f013245c8457c89703bcf37078aa
SHA512 537860f47b02162e40310b36985812d05ff719ce277ea8dd0ea0c267604ea7e8abd07aa9a3a75562cf18f78ef0bb88dfa3a3bfec3315d2f2c926ba966d434695
SSDEEP 49152:X1PbpubQGl5XCWoCiVhNmOSozKFWjNU+6huWKyBdzfU:X1s7l5yWoCiVhTKFCU35Bdzs
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

105216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths