13cccb19332edc17ab4556e6926a7d50_NeikiAnalytics

General

Target
13cccb19332edc17ab4556e6926a7d50_NeikiAnalytics
Size 361KB
Sample240509-2lwffaea53
SHA256 9658029f65ab4cb80f29f7d9c7787488673cb5a62478e0e3d72fc60bc9437062
MD5 13cccb19332edc17ab4556e6926a7d50
SHA1 9fb167b81e1da861df60359e8b76de5aecfab13a
SHA512 f370546ff077a49e8e7eb87da327e7cbd8ed1778e6d9b5e3411f4fee8852017a301e23c045b55730d9617058d0c2fdf7543446ab7e51ac0461d17ab82f0f0a99
SSDEEP 6144:EGDvCqltVlI1ezGpfscLczzb5hMa2668/KXrO:iqltXI1ezC0cIznMP8/K
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13cccb19332edc17ab4556e6926a7d50_NeikiAnalytics

File Explorer

13cccb19332edc17ab4556e6926a7d50_NeikiAnalytics

.exe 361KB

13cccb19332edc17ab4556e6926a7d50_NeikiAnalytics

IMPHASH cbb199b85bd7e99e36eb212e7f14e32a
SHA256 9658029f65ab4cb80f29f7d9c7787488673cb5a62478e0e3d72fc60bc9437062
MD5 13cccb19332edc17ab4556e6926a7d50
SHA1 9fb167b81e1da861df60359e8b76de5aecfab13a
SHA512 f370546ff077a49e8e7eb87da327e7cbd8ed1778e6d9b5e3411f4fee8852017a301e23c045b55730d9617058d0c2fdf7543446ab7e51ac0461d17ab82f0f0a99
SSDEEP 6144:EGDvCqltVlI1ezGpfscLczzb5hMa2668/KXrO:iqltXI1ezC0cIznMP8/K
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23751

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kutukeca\tefukozube28 nayabazuni\vijojoyamip.pdb

kernel32

FindResourceExW BackupSeek GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnlock GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA lstrlenA GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA AddAtomA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetCPInfoExA TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA HeapSize GetDateFormatW GetConsoleDisplayMode GetComputerNameA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

13cccb19332edc17ab4556e6926a7d50_NeikiAnalytics

kernel32

user32

gdi32

generic