7f876e76894641072f7596b08c5392043a4a9e204b767f90630823c4409e5302_NeikiAnalytics[.]exe

General

Target

7f876e76894641072f7596b08c5392043a4a9e204b767f90630823c4409e5302_NeikiAnalytics.exe
Size

4.7MB
MD5

eb38cb3f76fdc650d3b6474f66f559f0
SHA1

5ea6f426cd2da519ed0da93299c66230486ae540
SHA256

7f876e76894641072f7596b08c5392043a4a9e204b767f90630823c4409e5302
SHA512

4438f070ebfd3c5b4b6e4dbb3c82453aaba0855c2a207533cb65dd427e1406d316a79485058882a9193c3004313aed88c52e3d3f6badc274e7a95e9043c92652
SSDEEP

98304:zxEcehYQy5uDymcS5fXNxhYcYE5+HXfxTAb8/lOFdT:z77grcSZNUGyPxTfQ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f876e76894641072f7596b08c5392043a4a9e204b767f90630823c4409e5302_NeikiAnalytics.exe

Files

7f876e76894641072f7596b08c5392043a4a9e204b767f90630823c4409e5302_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.5MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 39KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 2.5MB - Virtual size: 8.3MB

DATA Size: 39KB - Virtual size: 112KB

BSS Size: - Virtual size: 76KB

.idata Size: 5KB - Virtual size: 16KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 584KB

.rsrc Size: 2.2MB - Virtual size: 6.3MB

.aspack Size: 6KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

CODE
Size: 2.5MB - Virtual size: 8.3MB

DATA
Size: 39KB - Virtual size: 112KB

BSS
Size: - Virtual size: 76KB

.idata
Size: 5KB - Virtual size: 16KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 584KB

.rsrc
Size: 2.2MB - Virtual size: 6.3MB

.aspack
Size: 6KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB