dcc50ec1cc74d2f605b455885e781f40_NeikiAnalytics

General

Target
dcc50ec1cc74d2f605b455885e781f40_NeikiAnalytics
Size 423KB
Sample240510-pdsclade7z
SHA256 bc67a67c9441eb9220a42bda0af159fa9ae2eefcfb83370d28157bed5436dea4
MD5 dcc50ec1cc74d2f605b455885e781f40
SHA1 594447e41168142a701dff4ce16182f50921a064
SHA512 23422811b4c3ba39b9f4a44654e9547e6e42e8bbac857f02ce086686572860d9964674fc67d8a4020c4794f6bcf98311be51fd0f3dfc6b910bd4f118975886b5
SSDEEP 6144:4LLIBZxDP7MoSoKdtpeK1W8ChvqkTLNfhR4hSoLSnfVF+YlkAo:0LmHD7nFKdtYK3ChvhhR4hTQVHlkAo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcc50ec1cc74d2f605b455885e781f40_NeikiAnalytics

File Explorer

dcc50ec1cc74d2f605b455885e781f40_NeikiAnalytics

.exe 423KB

dcc50ec1cc74d2f605b455885e781f40_NeikiAnalytics

IMPHASH be0b2fc67b26807332b22624f2e2c4be
SHA256 bc67a67c9441eb9220a42bda0af159fa9ae2eefcfb83370d28157bed5436dea4
MD5 dcc50ec1cc74d2f605b455885e781f40
SHA1 594447e41168142a701dff4ce16182f50921a064
SHA512 23422811b4c3ba39b9f4a44654e9547e6e42e8bbac857f02ce086686572860d9964674fc67d8a4020c4794f6bcf98311be51fd0f3dfc6b910bd4f118975886b5
SSDEEP 6144:4LLIBZxDP7MoSoKdtpeK1W8ChvqkTLNfhR4hSoLSnfVF+YlkAo:0LmHD7nFKdtYK3ChvhhR4hTQVHlkAo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW GetCommState GetModuleHandleW GetProcessHeap GetDateFormatA GlobalAlloc LoadLibraryW IsBadCodePtr HeapDestroy GetModuleFileNameW SetConsoleTitleA GlobalUnfix SetCurrentDirectoryA GetProcAddress GetConsoleAliasExesLengthA BuildCommDCBW LoadLibraryA GetFileType SetConsoleDisplayMode WaitForMultipleObjects FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW GetVolumeInformationW SetFirmwareEnvironmentVariableW GetLocaleInfoA HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

dcc50ec1cc74d2f605b455885e781f40_NeikiAnalytics

kernel32

advapi32

generic