njrat | b3a1c43157fac6ac29afd7beaef36c90_NeikiAnalytics[.]exe

General

Target
b3a1c43157fac6ac29afd7beaef36c90_NeikiAnalytics.exe
Size 3.7MB
Sample240614-k64h4stfpg
SHA256 4d2d39c27c92573d77c42ccd246eb3bc88662daf691ae92326f2589ce42cc80e
MD5 b3a1c43157fac6ac29afd7beaef36c90
SHA1 382dc9764804283eaa23e75b7dfcd406d4004e40
SHA512 7aba67ba13f7a17ce6abd8a878d0d1e4df80f286e2c0fd7b3038327f5cb854612b6853d26d0ad9b62f8a1b6647483f489e1405d631d047da139e98601af7b2eb
SSDEEP 49152:gCOfN6X5tLLQTg20ITS/PPs/1kS4eKRL/SRsj0Zuur1T75YqVUrmNF98e:U6XLq/qPPslzKx/dJg1ErmNH
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx njrat

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3a1c43157fac6ac29afd7beaef36c90_NeikiAnalytics.exe

SHA256 4d2d39c27c92573d77c42ccd246eb3bc88662daf691ae92326f2589ce42cc80e
MD5 b3a1c43157fac6ac29afd7beaef36c90
SHA1 382dc9764804283eaa23e75b7dfcd406d4004e40
SHA512 7aba67ba13f7a17ce6abd8a878d0d1e4df80f286e2c0fd7b3038327f5cb854612b6853d26d0ad9b62f8a1b6647483f489e1405d631d047da139e98601af7b2eb
SSDEEP 49152:gCOfN6X5tLLQTg20ITS/PPs/1kS4eKRL/SRsj0Zuur1T75YqVUrmNF98e:U6XLq/qPPslzKx/dJg1ErmNH
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

149056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths