9deece55bf39067369983c3fe80215e0_NeikiAnalytics[.]exe

General

Target
9deece55bf39067369983c3fe80215e0_NeikiAnalytics.exe
Size 4.1MB
Sample240517-ecnb5sgb68
SHA256 6ac1cf37b0d90b82795913957aecacbab301ce1ec42b595a9747aca95db424f0
MD5 9deece55bf39067369983c3fe80215e0
SHA1 b0c80d8e08f9532c6799a08d047d02922695c2a8
SHA512 eb32beb8639fd0751f9c85da27bf2ae7ccd7a85898d10b5524eb2cbddb3e2e731ff5ddae5625f76418bf65948c494a395dfe62c14b0479eb5c02f6040de9dde4
SSDEEP 49152:dxy3MosfgXDzBbVjTL+ojlT7Gqy8qbM+gyKbuZpPIaCQALO/aG8q2Nr6K0b8um+a:CBzBxBRyGJk3ClTN+KaS+/5DX/2zKrK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9deece55bf39067369983c3fe80215e0_NeikiAnalytics.exe

.exe 4.1MB

9deece55bf39067369983c3fe80215e0_NeikiAnalytics.exe

IMPHASH ab8b07a5adb6c3411132a8f229f73c1a
SHA256 6ac1cf37b0d90b82795913957aecacbab301ce1ec42b595a9747aca95db424f0
MD5 9deece55bf39067369983c3fe80215e0
SHA1 b0c80d8e08f9532c6799a08d047d02922695c2a8
SHA512 eb32beb8639fd0751f9c85da27bf2ae7ccd7a85898d10b5524eb2cbddb3e2e731ff5ddae5625f76418bf65948c494a395dfe62c14b0479eb5c02f6040de9dde4
SSDEEP 49152:dxy3MosfgXDzBbVjTL+ojlT7Gqy8qbM+gyKbuZpPIaCQALO/aG8q2Nr6K0b8um+a:CBzBxBRyGJk3ClTN+KaS+/5DX/2zKrK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

3e:7b:23:cc:8f:56:5f:f8:0d:7f:62:83:aa:e8:86:2e:94:3b:f9:0e:c2:14:3e:be:c0:b3:b3:2d:6c:1f:0c:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52251f5711571c0f0d0d243a002f3139341c263d07362111531206573b1100053331,POSTALCODE=10815,ST=0b1c1115005f5c4e110211020c100803061f0e00074b0c1a02+ST=0b1c1115494a5c0e46050a0d120f1645561d521a15010e0a07500703161643105207180c51000c010f1413070a07025344080a0019190c561800501c570a055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

1

Major OS version

5

Entry point

16951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW LoadLibraryExW GetConsoleAliasA InterlockedDecrement SetCommBreak CreateHardLinkA LockFile GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW ReadConsoleInputA CreateEventA WriteConsoleW SetFilePointer GetTempPathW InterlockedExchange GetLastError SetLastError BackupRead GetProcAddress BuildCommDCBW LoadModule OpenMutexA LocalAlloc GetNumberFormatW AddAtomW RemoveDirectoryW VirtualProtect CloseHandle CreateFileW SetComputerNameExW GetComputerNameA IsProcessorFeaturePresent EncodePointer DecodePointer ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW SetEndOfFile

user32

SetCaretPos

gdi32

GetCharABCWidthsI

Sharing