8eec6abf18ef5e6ce025c75d03744600_NeikiAnalytics

General

Target
8eec6abf18ef5e6ce025c75d03744600_NeikiAnalytics
Size 404KB
Sample240509-t3srwaef99
SHA256 f8645e4d70d72dcd44a1606437c8481d415f9791b89dda79e5d7dfd0056a3357
MD5 8eec6abf18ef5e6ce025c75d03744600
SHA1 c2c5ea03a9a2c024c4713df18c24dc517254d5f6
SHA512 3bc5ac244f1e63a2e45b330feb988e58f3827252f35164c82938e40d1c43f1323852758a0294c04a14db173177fe5a9fb8968851b8b8f9503422393e68e168a2
SSDEEP 6144:zFnmGM8FncD84WsYk8WPdFZ+V3zu4NfCWXmCL/AvBFIUHf/:z5mLrD8xgzJu3zu4Nf5XmiUOw/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eec6abf18ef5e6ce025c75d03744600_NeikiAnalytics

File Explorer

8eec6abf18ef5e6ce025c75d03744600_NeikiAnalytics

.exe 404KB

8eec6abf18ef5e6ce025c75d03744600_NeikiAnalytics

IMPHASH 846e3703eabe2e97bf5cd60565d49593
SHA256 f8645e4d70d72dcd44a1606437c8481d415f9791b89dda79e5d7dfd0056a3357
MD5 8eec6abf18ef5e6ce025c75d03744600
SHA1 c2c5ea03a9a2c024c4713df18c24dc517254d5f6
SHA512 3bc5ac244f1e63a2e45b330feb988e58f3827252f35164c82938e40d1c43f1323852758a0294c04a14db173177fe5a9fb8968851b8b8f9503422393e68e168a2
SSDEEP 6144:zFnmGM8FncD84WsYk8WPdFZ+V3zu4NfCWXmCL/AvBFIUHf/:z5mLrD8xgzJu3zu4Nf5XmiUOw/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5206

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement EnumCalendarInfoW GetCommState SetDefaultCommConfigW WaitForSingleObject SetConsoleScreenBufferSize FindFirstFileExW GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GlobalAlloc LoadLibraryW GetLocaleInfoW lstrcpynW IsBadWritePtr SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA OpenJobObjectW FindAtomA FreeEnvironmentStringsW EnumDateFormatsW GetSystemTime SetFileAttributesW HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize FlushFileBuffers ReadFile CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

8eec6abf18ef5e6ce025c75d03744600_NeikiAnalytics

kernel32

generic