c564138a5dfe37ca9392c0ed3722bb10_NeikiAnalytics

General

Target
c564138a5dfe37ca9392c0ed3722bb10_NeikiAnalytics
Size 2.4MB
Sample240514-n3eblaef76
SHA256 f4abbf4717010d698712c6f85944d73755d0fc30a60844fc6d0c9d86822cca38
MD5 c564138a5dfe37ca9392c0ed3722bb10
SHA1 b859f2931678370ec7323284c48ee84420403dc6
SHA512 d0f92d165a455d838e9ffe83d4b8d5843ef65315ff2fe151bfebe6a09d1c8b8be842c797000fc46238a37f76b137bd6d491a84b7cd84e2412d96337cab9a6deb
SSDEEP 24576:XF/Qs4a9rtQ/D5ey/A5m27P8fIeWRvtuEpjgbnvPQN5vYB9n5g9U0MOMJwPQ+3oS:XF6KNjgZwQ+33e76
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c564138a5dfe37ca9392c0ed3722bb10_NeikiAnalytics

File Explorer

c564138a5dfe37ca9392c0ed3722bb10_NeikiAnalytics

.exe 2.4MB

c564138a5dfe37ca9392c0ed3722bb10_NeikiAnalytics

IMPHASH fc44ea252a959af70a85ab7931c62f70
SHA256 f4abbf4717010d698712c6f85944d73755d0fc30a60844fc6d0c9d86822cca38
MD5 c564138a5dfe37ca9392c0ed3722bb10
SHA1 b859f2931678370ec7323284c48ee84420403dc6
SHA512 d0f92d165a455d838e9ffe83d4b8d5843ef65315ff2fe151bfebe6a09d1c8b8be842c797000fc46238a37f76b137bd6d491a84b7cd84e2412d96337cab9a6deb
SSDEEP 24576:XF/Qs4a9rtQ/D5ey/A5m27P8fIeWRvtuEpjgbnvPQN5vYB9n5g9U0MOMJwPQ+3oS:XF6KNjgZwQ+33e76
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

22599

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\aaaas\uaar\saaaaa\reaas\staaaaaaaaaat\Reaaaae\saaaaaaaaaaat.paa

kernel32

InitializeCriticalSectionEx CreateFileW MultiByteToWideChar Sleep GetLastError LockResource CloseHandle LoadResource FindResourceW DecodePointer DeleteCriticalSection GetModuleHandleExW HeapFree HeapSize HeapReAlloc HeapAlloc GetProcessHeap GetModuleHandleW SetFilePointerEx GetConsoleMode WriteFile GetConsoleWindow SizeofResource IsDebuggerPresent OutputDebugStringW RaiseException EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetFileType SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP WriteConsoleW

user32

ShowWindow

Sharing

General

Malware Config

Signatures

File Explorer

c564138a5dfe37ca9392c0ed3722bb10_NeikiAnalytics

kernel32

user32

generic