7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe
Size 604KB
Sample240523-degrpsbe77
SHA256 5712791dc101ef56dae9f25893ae3e5f2e35bdbdd9b898e28c6cae2636089657
MD5 7cae9a90d74c77e23f34137d6940a770
SHA1 548204815e5ace136e2d5f9ceda621860cddcd46
SHA512 f4c7aa417f2d799a9beda59e2df3dfc9f4e1b7c93f3ba9c26abedb0d81dc36b07dc6c88e1ef782d67a1ebee7a67421506e4030055b6f3c77e918cb0d8889ec22
SSDEEP 12288:RIL6+oH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:yLM2JOt934J7Z6bQaj1BvUm9J
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe

File Explorer

7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe

.exe 604KB

7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe

IMPHASH e3f87ffd83badf587b9be58b184f1bc0
SHA256 5712791dc101ef56dae9f25893ae3e5f2e35bdbdd9b898e28c6cae2636089657
MD5 7cae9a90d74c77e23f34137d6940a770
SHA1 548204815e5ace136e2d5f9ceda621860cddcd46
SHA512 f4c7aa417f2d799a9beda59e2df3dfc9f4e1b7c93f3ba9c26abedb0d81dc36b07dc6c88e1ef782d67a1ebee7a67421506e4030055b6f3c77e918cb0d8889ec22
SSDEEP 12288:RIL6+oH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:yLM2JOt934J7Z6bQaj1BvUm9J
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\\binaries\amd64ret\bin\amd64\cvtres.pdb

advapi32

CryptDestroyHash CryptHashData CryptCreateHash CryptAcquireContextW CryptGetHashParam

kernel32

FindResourceExW LoadResource LoadLibraryExW GetProcAddress CreateFileW GetLastError GetFileSize CreateFileMappingW MapViewOfFile CloseHandle UnmapViewOfFile SetErrorMode GetEnvironmentVariableW WideCharToMultiByte MapViewOfFileEx GetFileType GetConsoleMode FindFirstFileW HeapFree FindNextFileW GetUserDefaultUILanguage EncodePointer FindClose HeapAlloc DecodePointer GetProcessHeap GetModuleHandleW RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime RtlCaptureContext

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception memset __std_terminate memcpy __C_specific_handler __current_exception_context memcmp memmove

api-ms-win-crt-heap-l1-1-0

free _set_new_mode calloc

api-ms-win-crt-string-l1-1-0

_strnicmp _wcsdup _wcsnicmp wcsncat_s wcsncpy_s _wcsicmp wcscpy_s

api-ms-win-crt-runtime-l1-1-0

terminate _errno _seh_filter_exe _set_app_type __doserrno __p__wpgmptr _initialize_wide_environment _get_initial_wide_environment _initterm _initterm_e _exit __p___argc __p___wargv _cexit _crt_atexit _register_thread_local_exe_atexit_callback _configure_wide_argv exit _initialize_onexit_table _register_onexit_function _c_exit

api-ms-win-crt-locale-l1-1-0

_configthreadlocale setlocale

api-ms-win-crt-filesystem-l1-1-0

_wremove _wsplitpath_s _wfullpath _wmakepath_s

api-ms-win-crt-time-l1-1-0

_time64 _tzset

api-ms-win-crt-stdio-l1-1-0

_chsize __stdio_common_vsprintf_s __stdio_common_vswscanf _set_fmode _get_osfhandle fclose __stdio_common_vfwprintf _wfsopen fputwc __acrt_iob_func _fcloseall fwrite ftell fseek fread _fileno __p__commode fputws

api-ms-win-crt-conio-l1-1-0

__conio_common_vcwprintf _cputws _putwch

api-ms-win-crt-convert-l1-1-0

wcstoul _itow_s _ultow_s

api-ms-win-crt-environment-l1-1-0

_wgetcwd

api-ms-win-crt-math-l1-1-0

__setusermatherr

Name

.text

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

1020B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe

advapi32

kernel32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

generic