37b476e0ca2630a15e0e6b49fbb17fd0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
37b476e0ca2630a15e0e6b49fbb17fd0_NeikiAnalytics.exe
Size 1.0MB
Sample240519-a2m1fshc67
SHA256 34948a95f6978fc0637734fe9267143c83c26e7e01a4707bbbe2816b8f45b42c
MD5 37b476e0ca2630a15e0e6b49fbb17fd0
SHA1 d76be712322815f6cd896f3103b8cc3bde819cff
SHA512 1904245f1c3b0cbb92ce876f09827f950f609bf09dfc36c76b1fcebca1d8a32d65957f921f7bdd838f02d90cc2299d88cfec046bf77f7a70c488afec9176cca8
SSDEEP 12288:WZR3S5wmxvL/f3vCNQPHQ/HrAyIQj7/ytBjvrEH7Vo:6JS5wADf3qNQPGvP6rEH7K
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37b476e0ca2630a15e0e6b49fbb17fd0_NeikiAnalytics.exe

File Explorer

37b476e0ca2630a15e0e6b49fbb17fd0_NeikiAnalytics.exe

.exe 1.0MB

37b476e0ca2630a15e0e6b49fbb17fd0_NeikiAnalytics.exe

IMPHASH 3ab7cc62e4963955ad408cd420cd8ef1
SHA256 34948a95f6978fc0637734fe9267143c83c26e7e01a4707bbbe2816b8f45b42c
MD5 37b476e0ca2630a15e0e6b49fbb17fd0
SHA1 d76be712322815f6cd896f3103b8cc3bde819cff
SHA512 1904245f1c3b0cbb92ce876f09827f950f609bf09dfc36c76b1fcebca1d8a32d65957f921f7bdd838f02d90cc2299d88cfec046bf77f7a70c488afec9176cca8
SSDEEP 12288:WZR3S5wmxvL/f3vCNQPHQ/HrAyIQj7/ytBjvrEH7Vo:6JS5wADf3qNQPGvP6rEH7K
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

135530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DpInst.pdb

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenProcessToken IsTextUnicode SetSecurityDescriptorDacl InitializeSecurityDescriptor AddAccessAllowedAce InitializeAcl GetLengthSid SetEntriesInAclW DeleteService StartServiceW ControlService OpenSCManagerW CloseServiceHandle OpenServiceW QueryServiceStatus RegDeleteValueW RegCreateKeyExW RegSetValueExW RegDeleteKeyW CheckTokenMembership ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32

GetFileAttributesW DeleteFileW ReleaseMutex SetFilePointer HeapFree GetProcessHeap HeapAlloc CreateMutexW FreeConsole SetConsoleMode SetConsoleCursorPosition GetConsoleScreenBufferInfo FreeLibrary FillConsoleOutputCharacterW ReadConsoleOutputW GetConsoleMode GetStdHandle GetProcAddress LoadLibraryW WriteConsoleW IsValidLocale lstrlenW lstrcmpW CompareStringW GetTempFileNameW FindFirstFileW FindNextFileW FindClose CopyFileW SetFileAttributesW FormatMessageW RaiseException GetFileSize CreateFileMappingW MapViewOfFile WriteConsoleOutputW UnmapViewOfFile InterlockedDecrement InterlockedIncrement CreateFileW WriteFile CreateThread WaitForMultipleObjectsEx InterlockedCompareExchange WaitForSingleObjectEx SetEvent CreateEventW GetExitCodeProcess DeviceIoControl VerSetConditionMask VerifyVersionInfoW CreateDirectoryW RemoveDirectoryW GetCurrentDirectoryW GetShortPathNameW GetFullPathNameW GetSystemDirectoryW GetSystemWindowsDirectoryW MoveFileExW SearchPathW GetSystemDefaultUILanguage LoadLibraryExW CreateFileA SetEndOfFile GetConsoleOutputCP WriteConsoleA GetLocaleInfoW FlushFileBuffers SetStdHandle GetStringTypeW GetStringTypeA GetConsoleCP GetLocaleInfoA Sleep LoadLibraryExA ReadFile LCMapStringW LCMapStringA GetThreadLocale SetThreadLocale GetUserDefaultUILanguage GetVersionExW GetLocalTime GetWindowsDirectoryW GetModuleFileNameW SetCurrentDirectoryW WaitForSingleObject GetOEMCP GetACP GetCPInfo UnhandledExceptionFilter TerminateProcess OutputDebugStringA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualFree HeapCreate GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue GetStartupInfoA GetFileType SetHandleCount GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleFileNameA ExitProcess GetModuleHandleA SetUnhandledExceptionFilter VirtualQuery GetSystemInfo GetModuleHandleW VirtualAlloc VirtualProtect GetStartupInfoW GetEnvironmentVariableW lstrcmpiW WideCharToMultiByte InterlockedExchange HeapSize HeapReAlloc HeapDestroy GetVersionExA DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection GetCommandLineW LocalAlloc GlobalFree LocalFree MultiByteToWideChar GetCurrentProcess GetLastError CloseHandle FindResourceExW FindResourceW LoadResource LockResource SizeofResource EnumResourceLanguagesW LocalReAlloc EnterCriticalSection

gdi32

SetLayout DeleteDC GetObjectW CreateCompatibleBitmap CreateBitmap SelectObject StartPage EndPage StartDocW EndDoc GetTextMetricsW GetDeviceCaps CreateFontIndirectW DeleteObject CreateCompatibleDC

user32

AllowSetForegroundWindow DefWindowProcW PostQuitMessage GetUserObjectInformationW GetProcessWindowStation GetIconInfo DrawIconEx CreateIconIndirect LoadIconW LoadBitmapW DrawTextExW LoadImageW GetSystemMetrics GetSysColor DestroyWindow GetWindowLongW SendDlgItemMessageW InvalidateRect SystemParametersInfoW GetDC ReleaseDC SetWindowLongW SetWindowTextW GetParent PostMessageW IsDlgButtonChecked CheckDlgButton SetFocus CallWindowProcW DestroyIcon DialogBoxParamW SetDlgItemTextW CharLowerW GetDlgItem SendMessageW MessageBoxW RegisterClassExW CreateWindowExW ShowWindow UnregisterClassA EndDialog

ntdll

RtlNtStatusToDosError NtOpenThreadToken NtQueryInformationToken NtOpenProcessToken RtlUnwind NtClose

shell32

SHGetFolderPathW ShellExecuteExW ord59 CommandLineToArgvW

setupapi

SetupDiClassNameFromGuidW SetupDiOpenClassRegKey SetupInstallFilesFromInfSectionW SetupPromptReboot SetupInstallFromInfSectionW SetupInstallServicesFromInfSectionW SetupDiGetActualSectionToInstallW SetupFindNextLine SetupFindNextMatchLineW SetupOpenInfFileW SetupGetLineCountW SetupCloseInfFile SetupFindFirstLineW SetupGetStringFieldW pSetupSetGlobalFlags pSetupGetGlobalFlags SetupGetFieldCount SetupGetIntField SetupOpenAppendInfFileW SetupDiSetClassInstallParamsW SetupDiGetClassDevsW SetupDiGetSelectedDriverW SetupDiGetDriverInfoDetailW CM_Enumerate_Classes CM_Get_DevNode_Status SetupDiCreateDeviceInfoList SetupDiSetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList SetupDiGetDeviceInstanceIdW SetupDiOpenDevRegKey SetupDiOpenDeviceInfoW SetupDiSetSelectedDevice SetupDiGetDeviceInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiBuildDriverInfoList SetupDiCallClassInstaller SetupDiGetDeviceRegistryPropertyW SetupGetTargetPathW SetupQueueCopyIndirectW SetupQueueCopyW SetupOpenFileQueue SetupInitDefaultQueueCallbackEx SetupDefaultQueueCallbackW SetupCommitFileQueueW SetupTermDefaultQueueCallback SetupCloseFileQueue SetupCopyOEMInfW CM_Locate_DevNodeW CM_Get_Device_ID_List_SizeW CM_Get_Device_ID_ListW CM_Get_Device_IDW CM_Setup_DevNode SetupDiEnumDeviceInfo CMP_WaitNoPendingInstallEvents CM_Query_And_Remove_SubTreeW

wintrust

WinVerifyTrust CryptCATAdminCalcHashFromFileHandle

ole32

CoTaskMemFree StringFromCLSID CoUninitialize CoInitialize CoCreateInstance

oleaut32

VariantInit VariantClear VariantChangeType SysAllocString SysFreeString

comctl32

CreatePropertySheetPageW ImageList_ReplaceIcon ImageList_SetBkColor PropertySheetW ImageList_Create

comdlg32

PrintDlgExW GetSaveFileNameW

crypt32

CertFreeCertificateContext CertFreeCTLContext CertGetCTLContextProperty CryptQueryObject

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW