31d2245738b8b7b38793b3a8e770ae80_NeikiAnalytics[.]exe

General

Target
31d2245738b8b7b38793b3a8e770ae80_NeikiAnalytics.exe
Size 211KB
Sample240525-24eweaee77
SHA256 8f79a923b128ebefd6b246f736dbe2745118442394f1b5a284a49c59a79d6c92
MD5 31d2245738b8b7b38793b3a8e770ae80
SHA1 d8f6e10db4111dac83b3ff69096b2fa952882d3a
SHA512 e3fbe3777ea9f664df6f698d99af1693bda86640f1c5539a78ead906a5ba12eaec375f5ff11b64f163bf72c76e04968e8b3effe8ad7ecd229c17d431cdef1b01
SSDEEP 3072:2s7akQHf4C/RgMhg2Z6+6sSwevGUp6EQ8iUdoWNxb4PltslTqAoe2Ce:tOwC5gh9NpTQ8i1WNZq2lTFoe2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d2245738b8b7b38793b3a8e770ae80_NeikiAnalytics.exe

File Explorer

31d2245738b8b7b38793b3a8e770ae80_NeikiAnalytics.exe

.exe 211KB

31d2245738b8b7b38793b3a8e770ae80_NeikiAnalytics.exe

IMPHASH 7ef26bd2cf09974678d15fc70d74d406
SHA256 8f79a923b128ebefd6b246f736dbe2745118442394f1b5a284a49c59a79d6c92
MD5 31d2245738b8b7b38793b3a8e770ae80
SHA1 d8f6e10db4111dac83b3ff69096b2fa952882d3a
SHA512 e3fbe3777ea9f664df6f698d99af1693bda86640f1c5539a78ead906a5ba12eaec375f5ff11b64f163bf72c76e04968e8b3effe8ad7ecd229c17d431cdef1b01
SSDEEP 3072:2s7akQHf4C/RgMhg2Z6+6sSwevGUp6EQ8iUdoWNxb4PltslTqAoe2Ce:tOwC5gh9NpTQ8i1WNZq2lTFoe2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16007

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect GetLastError SetLastError GetThreadContext GetCommTimeouts GetTickCount CreateEventW LoadLibraryA LoadLibraryW LoadLibraryExA GetModuleFileNameA GetSystemDirectoryW RemoveDirectoryA CopyFileExW GetVolumeInformationW IsBadStringPtrA BuildCommDCBW SetComputerNameExA GetLocaleInfoA GetNumberFormatW WriteConsoleA WriteConsoleW AddConsoleAliasW GetStringTypeW OutputDebugStringW LocalAlloc SetFileAttributesW GetProcAddress EncodePointer DecodePointer IsProcessorFeaturePresent RaiseException RtlUnwind GetCommandLineW HeapAlloc HeapFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection CloseHandle ReadFile GetConsoleMode ReadConsoleW GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LCMapStringW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc SetStdHandle FlushFileBuffers GetConsoleCP SetFilePointerEx CreateFileW

user32

DdeFreeStringHandle

gdi32

GetCharWidthA GetCharABCWidthsI

Sharing