19c7740c4a662e509c3cb7810fdeea10_NeikiAnalytics

General

Target
19c7740c4a662e509c3cb7810fdeea10_NeikiAnalytics
Size 468KB
Sample240509-23lmkafc95
SHA256 32b94724305def0610d845e6d95ee97cce0f497bd8348841707a2a20d5022958
MD5 19c7740c4a662e509c3cb7810fdeea10
SHA1 e6b470d571a988ab316018aa729ffeada9a0edec
SHA512 d3d643630adcf30563bf0d8f125ce565cc77e72d844d2fdc7febd8d84f2a2656cf2a187ed5b84f64409729cc2bcf69ee5f41c511438c3234b775b2b3a8ce86eb
SSDEEP 6144:Cg2uH8y29HMHKeNP9hL+0LANqcP7Ev2EwwvZRMI7CYF6OYBc7:Zd8dWHz1+AmPc2CZOI7JlYBc7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c7740c4a662e509c3cb7810fdeea10_NeikiAnalytics

File Explorer

19c7740c4a662e509c3cb7810fdeea10_NeikiAnalytics

.exe 468KB

19c7740c4a662e509c3cb7810fdeea10_NeikiAnalytics

IMPHASH ba943e1394c5d4cb4ec8cf9002f8bc38
SHA256 32b94724305def0610d845e6d95ee97cce0f497bd8348841707a2a20d5022958
MD5 19c7740c4a662e509c3cb7810fdeea10
SHA1 e6b470d571a988ab316018aa729ffeada9a0edec
SHA512 d3d643630adcf30563bf0d8f125ce565cc77e72d844d2fdc7febd8d84f2a2656cf2a187ed5b84f64409729cc2bcf69ee5f41c511438c3234b775b2b3a8ce86eb
SSDEEP 6144:Cg2uH8y29HMHKeNP9hL+0LANqcP7Ev2EwwvZRMI7CYF6OYBc7:Zd8dWHz1+AmPc2CZOI7JlYBc7
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

71951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetLastError CloseHandle CreateProcessW InitializeCriticalSectionAndSpinCount WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW CreateFileW GetFileSize ReadFile WriteFile GetComputerNameA GetModuleFileNameW Sleep GetSystemTime FileTimeToLocalFileTime RaiseException HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap SetEndOfFile WriteConsoleW SetStdHandle ReadConsoleW OutputDebugStringW FreeLibrary InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetStringTypeW GetCommandLineW GetCurrentThreadId LoadLibraryExW RtlUnwind GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW IsProcessorFeaturePresent LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ExitProcess GetModuleHandleExW GetStdHandle GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsDebuggerPresent GetConsoleCP GetConsoleMode IsValidCodePage GetACP GetOEMCP SetFilePointerEx FlushFileBuffers SetFilePointer LoadLibraryExA

ole32

CoCreateInstance CoInitialize

shlwapi

PathRemoveExtensionW PathIsRootW PathFileExistsW PathAddExtensionW PathAppendW

Sharing

General

Malware Config

Signatures

File Explorer

19c7740c4a662e509c3cb7810fdeea10_NeikiAnalytics

kernel32

ole32

shlwapi

generic