bd70a5336dc8b1ade6ab3a6acf8f80b0_NeikiAnalytics

General

Target
bd70a5336dc8b1ade6ab3a6acf8f80b0_NeikiAnalytics
Size 425KB
Sample240510-lyds6abd62
SHA256 5cc20281a48cd34f2db1113990c962771687bd9820c9af3d0155c8e30d284e54
MD5 bd70a5336dc8b1ade6ab3a6acf8f80b0
SHA1 cdc693348edbfd9ce36a99c1e7fc6c6d8df49766
SHA512 0380dacb51232824903f822544e6a0e327d3fb9e57617888ee265c051b2fa2ae2c58b7d81252e7a889154f954112bd877b93c1a7771075e4d449ae00b977f74a
SSDEEP 6144:QGazuPt+M/p0zH5rO5+DPpHl0EA5E/c2GuTcqI3pLTaEA8v:QGazuV+0Oz6aPBvA5QvRcqwpan8v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd70a5336dc8b1ade6ab3a6acf8f80b0_NeikiAnalytics

File Explorer

bd70a5336dc8b1ade6ab3a6acf8f80b0_NeikiAnalytics

.exe 425KB

bd70a5336dc8b1ade6ab3a6acf8f80b0_NeikiAnalytics

IMPHASH 4844545e0b5ceed300acfd900c0994fb
SHA256 5cc20281a48cd34f2db1113990c962771687bd9820c9af3d0155c8e30d284e54
MD5 bd70a5336dc8b1ade6ab3a6acf8f80b0
SHA1 cdc693348edbfd9ce36a99c1e7fc6c6d8df49766
SHA512 0380dacb51232824903f822544e6a0e327d3fb9e57617888ee265c051b2fa2ae2c58b7d81252e7a889154f954112bd877b93c1a7771075e4d449ae00b977f74a
SSDEEP 6144:QGazuPt+M/p0zH5rO5+DPpHl0EA5E/c2GuTcqI3pLTaEA8v:QGazuV+0Oz6aPBvA5QvRcqwpan8v
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16223

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jixixak\woguwiju\calapa-wuked\fafecatexuku2\gomoli.pdb

kernel32

LocalCompact GetComputerNameW CreateHardLinkA BackupSeek GetTickCount GetConsoleAliasesA EnumTimeFormatsA GetUserDefaultLangID SetCommState LoadLibraryW GetLocaleInfoW ReadConsoleInputA WriteConsoleW MultiByteToWideChar GetTempPathW InterlockedExchange GetLastError ChangeTimerQueueTimer SetLastError FindResourceExW GetProcAddress SetFileAttributesA BuildCommDCBW LoadLibraryA LocalAlloc GetExitCodeThread AddAtomW RemoveDirectoryW GlobalFindAtomW GetModuleFileNameA GetOEMCP GlobalUnWire FindFirstChangeNotificationA LoadLibraryExA SetCalendarInfoA GetWindowsDirectoryW GetConsoleProcessList GetVolumeInformationW GetThreadLocale GetSystemDefaultLangID GetStringTypeW OutputDebugStringW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc ExitProcess GetModuleHandleExW WideCharToMultiByte HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle GetCurrentThreadId GetProcessHeap WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetCPInfo HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers CreateFileW

advapi32

DeregisterEventSource

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

bd70a5336dc8b1ade6ab3a6acf8f80b0_NeikiAnalytics

kernel32

advapi32

winhttp

generic