ea9dd1eae2e521666d3f06382104ec10_NeikiAnalytics[.]exe

General

Target
ea9dd1eae2e521666d3f06382104ec10_NeikiAnalytics.exe
Size 317KB
Sample240523-ynyf2aeb8x
SHA256 472785c4addba719d551e2c3afd1c94ae46140331eb0a50f3eaae2e0d6c659a9
MD5 ea9dd1eae2e521666d3f06382104ec10
SHA1 46e89afeb61c1d0852412480ee202d48c7d5aceb
SHA512 1c52e89d2918dfc05c4c31fc14602637c1a1989e7012eca616316b12c1bc07291bbca905e3dfdfdbe7d54de894ac84ad28180753e92167b4038cf6f0e09d7d61
SSDEEP 6144:aKhKQnUA3eyGQ8B5Cckma/ntmfbQaKLtFng7pZ40:/KQUsGQ8B5E/gUhLcdq0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea9dd1eae2e521666d3f06382104ec10_NeikiAnalytics.exe

File Explorer

ea9dd1eae2e521666d3f06382104ec10_NeikiAnalytics.exe

.exe 317KB

ea9dd1eae2e521666d3f06382104ec10_NeikiAnalytics.exe

IMPHASH 37b83adc183001c9e38660b73f251c40
SHA256 472785c4addba719d551e2c3afd1c94ae46140331eb0a50f3eaae2e0d6c659a9
MD5 ea9dd1eae2e521666d3f06382104ec10
SHA1 46e89afeb61c1d0852412480ee202d48c7d5aceb
SHA512 1c52e89d2918dfc05c4c31fc14602637c1a1989e7012eca616316b12c1bc07291bbca905e3dfdfdbe7d54de894ac84ad28180753e92167b4038cf6f0e09d7d61
SSDEEP 6144:aKhKQnUA3eyGQ8B5Cckma/ntmfbQaKLtFng7pZ40:/KQUsGQ8B5E/gUhLcdq0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount TzSpecificLocalTimeToSystemTime WriteConsoleW GetSystemDirectoryA SetComputerNameExW IsBadStringPtrA GetLastError SetLastError GetProcAddress LoadLibraryA GetConsoleAliasA GetNumberFormatW CreateEventW RemoveDirectoryW GetModuleFileNameA BuildCommDCBA VirtualProtect PurgeComm SetFileAttributesW GetVolumeInformationW CloseHandle CreateFileW GetStringTypeW LocalAlloc LoadLibraryExW OutputDebugStringW GetConsoleCP IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection HeapFree ReadFile SetFilePointerEx DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleMode ReadConsoleW SetStdHandle FlushFileBuffers SetEndOfFile

user32

GetMenuItemID ChangeDisplaySettingsW

gdi32

GetCharWidthI

ole32

CoMarshalHresult

Sharing