683e742ebb8c8c9d7d1221912cab82b0_NeikiAnalytics

General

Target
683e742ebb8c8c9d7d1221912cab82b0_NeikiAnalytics
Size 81KB
Sample240512-eq6ewaba53
SHA256 4714e9156f6ca58efeb2c2111e10a1ec4a46e7b863e307d3e4b21653f5393827
MD5 683e742ebb8c8c9d7d1221912cab82b0
SHA1 2feeea4eccc66c680b6f527f2e784abe84926925
SHA512 912ec803461af60ac81d1da22777ed9ca12d1099e5bef730eb8d3b0eab8c75ca7599264a4e66221e91eab95336cf3de29204021264a012883e55854de7f7dbe8
SSDEEP 1536:OtByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8WT:O4v4JKXTx71w0ArSsXF3enq8WT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
683e742ebb8c8c9d7d1221912cab82b0_NeikiAnalytics

File Explorer

683e742ebb8c8c9d7d1221912cab82b0_NeikiAnalytics

.dll 81KB

683e742ebb8c8c9d7d1221912cab82b0_NeikiAnalytics

IMPHASH 0986ee100b9277b4d1503d41cc8367e7
SHA256 4714e9156f6ca58efeb2c2111e10a1ec4a46e7b863e307d3e4b21653f5393827
MD5 683e742ebb8c8c9d7d1221912cab82b0
SHA1 2feeea4eccc66c680b6f527f2e784abe84926925
SHA512 912ec803461af60ac81d1da22777ed9ca12d1099e5bef730eb8d3b0eab8c75ca7599264a4e66221e91eab95336cf3de29204021264a012883e55854de7f7dbe8
SSDEEP 1536:OtByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8WT:O4v4JKXTx71w0ArSsXF3enq8WT
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

HeapFree GetCurrentProcess CreateMutexA LocalAlloc Sleep GetLastError CreateFileA LoadLibraryA CloseHandle K32GetModuleInformation VirtualProtect VirtualAllocEx LocalFree GetFileSize ExitProcess ReadProcessMemory GetProcessHeap FreeLibrary K32EnumProcessModules GetComputerNameA WriteConsoleW WriteProcessMemory GetModuleFileNameA HeapAlloc ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW EncodePointer RaiseException GetModuleHandleExW GetModuleFileNameW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

683e742ebb8c8c9d7d1221912cab82b0_NeikiAnalytics

kernel32

generic