AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
Behavioral task
behavioral1
Sample
97839fd423c68b4a52e28044ab7571b5f7001b211f9de9a451c702c73e37612d_NeikiAnalytics.exe
Resource
win7-20240221-en
Target
97839fd423c68b4a52e28044ab7571b5f7001b211f9de9a451c702c73e37612d_NeikiAnalytics.exe
Size
3.0MB
MD5
a9a48a07e039b39b2dde5ea6c2baf4d0
SHA1
e7ea72dd2544c054c252f52ea8dd4ac521ed82c0
SHA256
97839fd423c68b4a52e28044ab7571b5f7001b211f9de9a451c702c73e37612d
SHA512
b77023161d6f4a16d59ca26fc383693ab976643aee22cae39cecca39cc7be2a1e22b5ca11bfe49f1a35648d7ecd55f9650977694bfb691e90c90812bd3aa9e01
SSDEEP
49152:Xiv+Iu1//Fw/d1pXE55YSRpj2Z2OF5MFnAi6UQz62zzyoXmSqLNF4NgYj7xddlX:4u/Fq7E5GmpKjryQ5DUUSYxdf
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
97839fd423c68b4a52e28044ab7571b5f7001b211f9de9a451c702c73e37612d_NeikiAnalytics.exe |
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ