51638aaa58158dd58d2d49d4e140ed20_NeikiAnalytics[.]exe

General

Target
51638aaa58158dd58d2d49d4e140ed20_NeikiAnalytics.exe
Size 4.1MB
Sample240522-2vgzeacb59
SHA256 64421518b12f58757d77928f05284730d5ed451ad19e21cc01c32c69511aa2a5
MD5 51638aaa58158dd58d2d49d4e140ed20
SHA1 41beaf282684d291561c96a0ab7dfa051da3f48b
SHA512 760e6511cd0d87e3c2dbf4cab5d919f33c6dccb019b2d59d334f73a496268b0970c5e576613f71a1efde3f13d236582e8cb696930626b1f92cd72667e3b737c3
SSDEEP 98304:BvHfbigA34ifkpJZQU0TgaIfW6UkFHwAhDtgwFW+1A:BvHfb2IifudqhIuUHwAjW+S
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

51638aaa58158dd58d2d49d4e140ed20_NeikiAnalytics.exe

.exe 4.1MB

51638aaa58158dd58d2d49d4e140ed20_NeikiAnalytics.exe

IMPHASH 9862236cac6ef44068b988db8b49b46e
SHA256 64421518b12f58757d77928f05284730d5ed451ad19e21cc01c32c69511aa2a5
MD5 51638aaa58158dd58d2d49d4e140ed20
SHA1 41beaf282684d291561c96a0ab7dfa051da3f48b
SHA512 760e6511cd0d87e3c2dbf4cab5d919f33c6dccb019b2d59d334f73a496268b0970c5e576613f71a1efde3f13d236582e8cb696930626b1f92cd72667e3b737c3
SSDEEP 98304:BvHfbigA34ifkpJZQU0TgaIfW6UkFHwAhDtgwFW+1A:BvHfb2IifudqhIuUHwAjW+S
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

7b:e5:72:2d:45:25:ea:90:89:ea:3a:21:96:64:e0:a0:c4:d7:58:5e:f1:79:90:26:6e:5f:61:ee:85:b9:9f:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522036264b3c07530c0910253d36220330152b1b14292e1a512d092b0b3746071333,POSTALCODE=10823,ST=0b1c1115005f5c4e010b00161801040700070818064b0c1a02+ST=0b1c1115494a5c031c0b02081a1750475310151f070b57051217441d47031d1512195d501615110b570d0a17550b1209150a45131d1315075a001044160a055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CommConfigDialogA SetErrorMode InterlockedDecrement ZombifyActCtx FlushConsoleInputBuffer SetCommBreak FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesA EnumTimeFormatsW LoadLibraryW Sleep WriteConsoleOutputA WriteConsoleW GetNumaProcessorNode VirtualUnlock GetConsoleAliasesW GetLongPathNameW SetLastError GetProcAddress VerLanguageNameW LoadLibraryA SetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA DeleteCriticalSection SetCalendarInfoA GlobalReAlloc CompareStringW GetConsoleAliasesLengthW HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

advapi32

EnumDependentServicesW

Sharing