1702fe1cfb6aed75c800663eaf3ff630_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target
1702fe1cfb6aed75c800663eaf3ff630_NeikiAnalytics
Size 100KB
Sample240510-tdgnbagh44
SHA256 910d9417bfc56b0107970e94ff7ce27f820592e32c120cab25012275248706bb
MD5 1702fe1cfb6aed75c800663eaf3ff630
SHA1 e3111be553787d49a61b6d734e1876818d9bf1a4
SHA512 533b52797ceb33df293f0e8337f07ca63df21b1b0101f7a4c6a9de494be017c11901cbe3a776eeee122c35fb23fdf5dc3405c0f5cc5d8e9fd7159b7269dbff0f
SSDEEP 1536:dE9QaVQ8v9/ui73aOtH0nrFgUhRwqjhurmKFctV:/aV1/uMKacdhTjAqGctV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1702fe1cfb6aed75c800663eaf3ff630_NeikiAnalytics

File Explorer

1702fe1cfb6aed75c800663eaf3ff630_NeikiAnalytics

.exe 100KB

1702fe1cfb6aed75c800663eaf3ff630_NeikiAnalytics

IMPHASH f4222249773f0aee2e4d0364101f5b01
SHA256 910d9417bfc56b0107970e94ff7ce27f820592e32c120cab25012275248706bb
MD5 1702fe1cfb6aed75c800663eaf3ff630
SHA1 e3111be553787d49a61b6d734e1876818d9bf1a4
SHA512 533b52797ceb33df293f0e8337f07ca63df21b1b0101f7a4c6a9de494be017c11901cbe3a776eeee122c35fb23fdf5dc3405c0f5cc5d8e9fd7159b7269dbff0f
SSDEEP 1536:dE9QaVQ8v9/ui73aOtH0nrFgUhRwqjhurmKFctV:/aV1/uMKacdhTjAqGctV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23648

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddAtomW FreeConsole GetCurrencyFormatW IsProcessorFeaturePresent CreateEventA OpenFileMappingW LocalHandle HeapSize MulDiv WriteFile GetTempFileNameW SetLocaleInfoW DosDateTimeToFileTime EnumLanguageGroupLocalesW CreatePipe GetPrivateProfileSectionNamesA SetConsoleTitleA CancelDeviceWakeupRequest GetVolumePathNameA GetProfileIntA GetDateFormatA DebugBreak SuspendThread SetCommMask EnumUILanguagesW MoveFileWithProgressA BackupRead GetNumberOfConsoleInputEvents GetLongPathNameA FreeLibrary GetFileAttributesW EnumDateFormatsA QueryDosDeviceA UpdateResourceW WritePrivateProfileStructA lstrcpynA GetExitCodeProcess GlobalAddAtomW GetShortPathNameW UnlockFileEx SetComputerNameExA CreatePipe

gdi32

GetDeviceCaps

ole32

OleCreateFromData HWND_UserMarshal CreateAntiMoniker CoInitialize CoSetProxyBlanket CoDisconnectObject ReleaseStgMedium HGLOBAL_UserSize PropStgNameToFmtId

msvcrt

iswprint _wgetenv srand strtok iswupper tolower fputs _swab wcsncpy _fputchar iswctype _strupr bsearch _strnicmp memcmp _wspawnl _abnormal_termination _rotl _flsbuf isdigit memmove _isctype isalpha isgraph _wspawnvpe _wexecve _wcslwr _wcsrev fputwc _fcvt _ultoa tmpnam _wcreat

winmm

timeSetEvent waveOutOpen midiConnect midiOutSetVolume mmioOpenA mmioWrite DrvGetModuleHandle mciGetDeviceIDFromElementIDW waveOutGetErrorTextW joyGetPosEx mixerSetControlDetails joySetThreshold mmioRead waveOutGetDevCapsA DefDriverProc mmioDescend mixerGetLineInfoA mciSendStringA midiOutClose midiInGetDevCapsW midiStreamOut mmioSetBuffer midiInClose waveOutReset midiOutPrepareHeader waveInGetPosition GetDriverModuleHandle mmioGetInfo midiInMessage mciGetCreatorTask auxGetVolume joyGetDevCapsW waveInGetErrorTextA mixerGetLineControlsW

mscms

GetColorProfileElement UninstallColorProfileA AssociateColorProfileWithDeviceA EnumColorProfilesW GetStandardColorSpaceProfileW DisassociateColorProfileFromDeviceW GetStandardColorSpaceProfileA SetStandardColorSpaceProfileW DeleteColorTransform GetPS2ColorRenderingIntent SetColorProfileHeader TranslateBitmapBits CreateColorTransformA ConvertIndexToColorName CreateProfileFromLogColorSpaceW RegisterCMMW GetColorProfileElementTag GetColorProfileFromHandle UninstallColorProfileW CreateMultiProfileTransform GetCountColorProfileElements InstallColorProfileA CreateColorTransformW CheckColors SetColorProfileElementReference

Name

.text

Size

24KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mforJy

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.o7sqs

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.htext

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

1702fe1cfb6aed75c800663eaf3ff630_NeikiAnalytics

kernel32

gdi32

ole32

msvcrt

winmm

mscms

generic