914596a5fa092ea63fd3d3e4e9a1dfd0_NeikiAnalytics

General

Target
914596a5fa092ea63fd3d3e4e9a1dfd0_NeikiAnalytics
Size 6.6MB
Sample240516-edd5vsag8s
SHA256 126dddc6b55c4faeb42f92834ed97a89a1d085233b3fb46a70ee09240405890d
MD5 914596a5fa092ea63fd3d3e4e9a1dfd0
SHA1 8e2609c6c5f19dc56f6a891ee2267bdb70e7188d
SHA512 515ff0a5067ffe02ae681251d3670e9a2037d95aa6f85f3558cde2eabb45760d8826a781083e2dbd566915973278ccad430ea55ceb69c4e8b162340f5187353b
SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazr:kfauN/HYOSIT/EVF9v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
sample	pyinstaller

File Explorer

914596a5fa092ea63fd3d3e4e9a1dfd0_NeikiAnalytics

.exe 6.6MB
ii.pyc

1.8MB

914596a5fa092ea63fd3d3e4e9a1dfd0_NeikiAnalytics

IMPHASH 4df47bd79d7fe79953651a03293f0e8f
SHA256 126dddc6b55c4faeb42f92834ed97a89a1d085233b3fb46a70ee09240405890d
MD5 914596a5fa092ea63fd3d3e4e9a1dfd0
SHA1 8e2609c6c5f19dc56f6a891ee2267bdb70e7188d
SHA512 515ff0a5067ffe02ae681251d3670e9a2037d95aa6f85f3558cde2eabb45760d8826a781083e2dbd566915973278ccad430ea55ceb69c4e8b162340f5187353b
SSDEEP 196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazr:kfauN/HYOSIT/EVF9v
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Detects Pyinstaller

pyinstaller

PE Signature issue

Digest

43:f0:48:af:ee:9d:c4:aa:7e:38:a6:92:a4:3f:3c:48:bc:be:96:ec

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Shenzhen Smartspace Software technology Co.\,Limited,OU=研发部,O=Shenzhen Smartspace Software technology Co.\,Limited,L=Shenzhen,ST=Guangdong,C=CN

Chains

May 15, 2024

Minor OS version

1

Major OS version

5

Entry point

30618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError SetDllDirectoryW GetModuleFileNameW GetProcAddress GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW WaitForSingleObject Sleep GetExitCodeProcess CreateProcessW GetStartupInfoW LoadLibraryExW GetShortPathNameW FormatMessageW LoadLibraryA MultiByteToWideChar WideCharToMultiByte DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetCommandLineA ReadFile CreateFileW GetDriveTypeW GetFileType CloseHandle PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetFullPathNameW GetFullPathNameA CreateDirectoryW RemoveDirectoryW FindClose FindFirstFileExW FindNextFileW SetStdHandle SetConsoleCtrlHandler DeleteFileW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleCP CompareStringW LCMapStringW GetCurrentDirectoryW FlushFileBuffers SetEnvironmentVariableA GetFileAttributesExW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW GetProcessHeap WriteConsoleW GetTimeZoneInformation HeapSize HeapReAlloc SetEndOfFile RaiseException

ws2_32

ntohl

Sharing

General

Malware Config

Signatures

File Explorer

914596a5fa092ea63fd3d3e4e9a1dfd0_NeikiAnalytics

PE Signature issue

kernel32

ws2_32

generic

ii.pyc