GetVersionInfo
GraphicImport
Behavioral task
behavioral1
Sample
791eb781844bc32b07c87d61c8d76620_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
791eb781844bc32b07c87d61c8d76620_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
791eb781844bc32b07c87d61c8d76620_NeikiAnalytics.exe
Size
8KB
MD5
791eb781844bc32b07c87d61c8d76620
SHA1
55d40fdd841f95df8bb91fd79fe5b7b257c4b175
SHA256
e533c8a66127461ae26e0b03a743e0c41e8e86caa49f6387544683e16837a9e5
SHA512
d44faa8388614cf8e7aa83d370ec533f77351313722689fbff3b44ca0a389f3ccc1db5ae31b9cd5b9788d917fcd80ee1f0eafc7e752337d685edb9f706cdf8c0
SSDEEP
192:PvxcdHPrzCfwXJoEsSXv1Ns0VGJWT9Ahw:hKHPrzCfaoZSXtNvYJWCw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
791eb781844bc32b07c87d61c8d76620_NeikiAnalytics.exe |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionInfo
GraphicImport
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ