RTPBatSvr
RTPRegSvr
RTPRenSvr
RTPatchApply32@12
RTPatchApply32NoCall
RTPatchEnumPatches@12
RTPatchSetAttribGet@8
RTPatchSetAttribSet@8
RTPatchSetCreate@8
RTPatchSetDelete@8
RTPatchSetDirWalk@8
RTPatchSetOpen@8
RTPatchSetRename@8
Behavioral task
behavioral1
Sample
3c5c8c67b092f779c5f4cf78d9dedff0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3c5c8c67b092f779c5f4cf78d9dedff0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
3c5c8c67b092f779c5f4cf78d9dedff0_NeikiAnalytics.exe
Size
87KB
MD5
3c5c8c67b092f779c5f4cf78d9dedff0
SHA1
a3a22abee6cb7c431800f56f35399ad23c823c34
SHA256
1950d06523573910607a22b56a012580508f6dabdd11162ba977ce2506ffba89
SHA512
5e902127f4dc421f978b40831dc6ced46fee768dca4d7d91c2660625b9389684b60fba2c59234b95e1e9fae9a051b682c7b9df76d383ade8ea650eba4345965f
SSDEEP
1536:KTJL4utaMEtZO2MkA3w1muoDgZEUg02V8/KwYGGkFasfsTPn8YvMOrpZQ:KTJL4utaht/pFmul+NV8SNkqdMOrpZQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c5c8c67b092f779c5f4cf78d9dedff0_NeikiAnalytics.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RTPBatSvr
RTPRegSvr
RTPRenSvr
RTPatchApply32@12
RTPatchApply32NoCall
RTPatchEnumPatches@12
RTPatchSetAttribGet@8
RTPatchSetAttribSet@8
RTPatchSetCreate@8
RTPatchSetDelete@8
RTPatchSetDirWalk@8
RTPatchSetOpen@8
RTPatchSetRename@8
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ