RegisterYAMLImage
UnregisterYAMLImage
Behavioral task
behavioral1
Sample
6243c0d97fb333d04e5a8fdf9670edd74198ff8da1e14c55db7b6fb59032c946_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6243c0d97fb333d04e5a8fdf9670edd74198ff8da1e14c55db7b6fb59032c946_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
6243c0d97fb333d04e5a8fdf9670edd74198ff8da1e14c55db7b6fb59032c946_NeikiAnalytics.exe
Size
19KB
MD5
cca53aae14dcddad49c01bd727d0c9f0
SHA1
44153f96e8ed5c56732aa0ddc836e2adadf032af
SHA256
6243c0d97fb333d04e5a8fdf9670edd74198ff8da1e14c55db7b6fb59032c946
SHA512
4635b71e94f8b684b6b63b1ebcca3561194eec22bf199df8c1e036b67c7eedd06ab746b766369b0f5a55c9075c8f5d17fc30c28fe4e2b40df0d7097afc439fc1
SSDEEP
384:nSZBNQ6/IZsgIyWW0v1vvyO0iQOJFrvogMzAKhse:U75/IBXoNTXrpose
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6243c0d97fb333d04e5a8fdf9670edd74198ff8da1e14c55db7b6fb59032c946_NeikiAnalytics.exe |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
RegisterYAMLImage
UnregisterYAMLImage
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ