17c98579621dd407ace734e938c40cc0_NeikiAnalytics

General

Target
17c98579621dd407ace734e938c40cc0_NeikiAnalytics
Size 2.7MB
Sample240511-tgphbshd85
SHA256 83906519a4ff73c53682058d313fd60981bc25ca9fa0aedb19a169a615760c6f
MD5 17c98579621dd407ace734e938c40cc0
SHA1 06abd9d2f8a8d12454df99b2a87c87f4c44c05af
SHA512 b535e000dc31a45fd53aaa54fb6ed957ad61c282dd8aecb0ede5e10b7a681062481c6f72699620a1e48cc029eafa3d9ecc069583e44122361bc8431d58b936ff
SSDEEP 12288:g0Ci95tAxa/1Otz2lRh0Lov3esUj0iOLdgEOxmJ0w8iPDEo//YjWvAWM9m22m:l5tAxa/TlRqn05LWlmJ0w1D3YjWvA1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c98579621dd407ace734e938c40cc0_NeikiAnalytics

File Explorer

17c98579621dd407ace734e938c40cc0_NeikiAnalytics

.exe 2.7MB

17c98579621dd407ace734e938c40cc0_NeikiAnalytics

IMPHASH 38cb55403defc1aa8fba6e83e65a8248
SHA256 83906519a4ff73c53682058d313fd60981bc25ca9fa0aedb19a169a615760c6f
MD5 17c98579621dd407ace734e938c40cc0
SHA1 06abd9d2f8a8d12454df99b2a87c87f4c44c05af
SHA512 b535e000dc31a45fd53aaa54fb6ed957ad61c282dd8aecb0ede5e10b7a681062481c6f72699620a1e48cc029eafa3d9ecc069583e44122361bc8431d58b936ff
SSDEEP 12288:g0Ci95tAxa/1Otz2lRh0Lov3esUj0iOLdgEOxmJ0w8iPDEo//YjWvAWM9m22m:l5tAxa/TlRqn05LWlmJ0w1D3YjWvA1
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

63528

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW CreateFileW WideCharToMultiByte GetLastError SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

17c98579621dd407ace734e938c40cc0_NeikiAnalytics

kernel32

generic