9215cdf8d85d6d03729028810f1349c0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
9215cdf8d85d6d03729028810f1349c0_NeikiAnalytics.exe
Size 4.1MB
Sample240517-dhs9xaee65
SHA256 3222a9c46430f35c54d9dd9569f28c0c3021df9801f8d3ca23ad86d74aa77e73
MD5 9215cdf8d85d6d03729028810f1349c0
SHA1 3ffe0a2b1cd76ccc60f6f573faf25ba843c1c3be
SHA512 cc1fed45ea5b39a66331690a28ed77193d80e9ef56d8c8875b447a57ffa80e3eff3c1457d41dc3949ccfa7d2293a0bda83858c65a5015e0d3747c5f581b94632
SSDEEP 98304:f3fTyF1Iqj+iGO3HPFpRmVBVcUBnWr2lG4:fP2Aqj+pO3P4mAWr2w4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9215cdf8d85d6d03729028810f1349c0_NeikiAnalytics.exe

.exe 4.1MB

9215cdf8d85d6d03729028810f1349c0_NeikiAnalytics.exe

IMPHASH 9d021f75b7ec8952bd02896017625c40
SHA256 3222a9c46430f35c54d9dd9569f28c0c3021df9801f8d3ca23ad86d74aa77e73
MD5 9215cdf8d85d6d03729028810f1349c0
SHA1 3ffe0a2b1cd76ccc60f6f573faf25ba843c1c3be
SHA512 cc1fed45ea5b39a66331690a28ed77193d80e9ef56d8c8875b447a57ffa80e3eff3c1457d41dc3949ccfa7d2293a0bda83858c65a5015e0d3747c5f581b94632
SSDEEP 98304:f3fTyF1Iqj+iGO3HPFpRmVBVcUBnWr2lG4:fP2Aqj+pO3P4mAWr2w4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

45:71:9a:02:49:0d:d8:d1:b0:89:d9:51:bf:db:49:6f:b5:78:4c:81:68:d3:9a:53:73:ad:92:2f:b0:09:d6:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522434573635311625120101053d123d53210e113336571014061e5d361525000421,POSTALCODE=10823,ST=0b1c1115005f5c4e11160813180402164b1c1312+ST=0b1c1115494a5c111413080004511740571216140506085f501c465147571b51505119141402511b5716571c511b0904121c030e061111050a0600110102055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

Major OS version

Entry point

16583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW LoadLibraryExW LockFile GetTickCount EnumTimeFormatsW TzSpecificLocalTimeToSystemTime GetVolumeInformationA GlobalFindAtomA LoadLibraryW ReadConsoleInputA GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW GetTempPathW InterlockedExchange GetLastError SetLastError SetFilePointer BackupWrite RemoveDirectoryA BuildCommDCBW LoadModule LoadLibraryA OpenMutexA WriteConsoleA LocalAlloc CreateHardLinkW GetNumberFormatW AddAtomW CreateEventW VirtualProtect PurgeComm GetWindowsDirectoryW CloseHandle CreateFileW GetProcAddress GetComputerNameA GetStringTypeW OutputDebugStringW FlushFileBuffers GetConsoleCP IsProcessorFeaturePresent EncodePointer DecodePointer ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection HeapFree SetFilePointerEx GetConsoleMode ReadConsoleW GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle SetEndOfFile

user32

SetCaretPos

gdi32

GetCharABCWidthsI

ole32

CoMarshalHresult

msimg32

AlphaBlend