9be2d86c26f7c414cf72f7fc30338c60_NeikiAnalytics

General

Target
9be2d86c26f7c414cf72f7fc30338c60_NeikiAnalytics
Size 81KB
Sample240516-feenfsce7s
SHA256 8d6addd296548333564b0870d0be7b70d990d014f0974897deca48c0fc92277d
MD5 9be2d86c26f7c414cf72f7fc30338c60
SHA1 bf2fcc756a85c4613558b0d493ae71132a1fe597
SHA512 0995122f3c787adb7f3b800a6453f542465182e867609e1d3e90eee7e1de7d0684f2ae33abed201cebaaf6b9ab0cf1e4675b5d0a8b313c6af90be73c3e931808
SSDEEP 1536:ktByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8WE:k4v4JKXTx71w0ArSsXF3enq8WE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9be2d86c26f7c414cf72f7fc30338c60_NeikiAnalytics

File Explorer

9be2d86c26f7c414cf72f7fc30338c60_NeikiAnalytics

.dll 81KB

9be2d86c26f7c414cf72f7fc30338c60_NeikiAnalytics

IMPHASH 0986ee100b9277b4d1503d41cc8367e7
SHA256 8d6addd296548333564b0870d0be7b70d990d014f0974897deca48c0fc92277d
MD5 9be2d86c26f7c414cf72f7fc30338c60
SHA1 bf2fcc756a85c4613558b0d493ae71132a1fe597
SHA512 0995122f3c787adb7f3b800a6453f542465182e867609e1d3e90eee7e1de7d0684f2ae33abed201cebaaf6b9ab0cf1e4675b5d0a8b313c6af90be73c3e931808
SSDEEP 1536:ktByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8WE:k4v4JKXTx71w0ArSsXF3enq8WE
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

HeapFree GetCurrentProcess CreateMutexA LocalAlloc Sleep GetLastError CreateFileA LoadLibraryA CloseHandle K32GetModuleInformation VirtualProtect VirtualAllocEx LocalFree GetFileSize ExitProcess ReadProcessMemory GetProcessHeap FreeLibrary K32EnumProcessModules GetComputerNameA WriteConsoleW WriteProcessMemory GetModuleFileNameA HeapAlloc ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW EncodePointer RaiseException GetModuleHandleExW GetModuleFileNameW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

9be2d86c26f7c414cf72f7fc30338c60_NeikiAnalytics

kernel32

generic