e6b4d2c7bd9bb11dcca90c095642f100_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
e6b4d2c7bd9bb11dcca90c095642f100_NeikiAnalytics.exe
Size 143KB
Sample240525-bjs97ahe48
SHA256 d96a1638beb77c9099c36aceb5a03b4f530ee130292c6c58419337120ecd2d04
MD5 e6b4d2c7bd9bb11dcca90c095642f100
SHA1 718f2c8178ebad4b18d9e8d1552721d50ad087a8
SHA512 b3158ab898714b9ed3f8284c6d54830f9c5082334d1fb747ba2d850f61fc1c19ebd13def4b73ab591379b90b628b269a88184335fc92aa7c6117a76d0d65c5d7
SSDEEP 3072:Mm4AppEsL9psXmZ0AaddndNdYdqs0dOx9EDLdQtFO71EpuWuS71Ea+B5p0:Mm4AppESUddndNdYdT0dO8KaBERBEzF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6b4d2c7bd9bb11dcca90c095642f100_NeikiAnalytics.exe

File Explorer

e6b4d2c7bd9bb11dcca90c095642f100_NeikiAnalytics.exe

.dll 143KB

e6b4d2c7bd9bb11dcca90c095642f100_NeikiAnalytics.exe

IMPHASH 1b79969192d22fe1b8b2510167911722
SHA256 d96a1638beb77c9099c36aceb5a03b4f530ee130292c6c58419337120ecd2d04
MD5 e6b4d2c7bd9bb11dcca90c095642f100
SHA1 718f2c8178ebad4b18d9e8d1552721d50ad087a8
SHA512 b3158ab898714b9ed3f8284c6d54830f9c5082334d1fb747ba2d850f61fc1c19ebd13def4b73ab591379b90b628b269a88184335fc92aa7c6117a76d0d65c5d7
SSDEEP 3072:Mm4AppEsL9psXmZ0AaddndNdYdqs0dOx9EDLdQtFO71EpuWuS71Ea+B5p0:Mm4AppESUddndNdYdT0dO8KaBERBEzF
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

63282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ntdll

memchr memcmp _chkstk sprintf strtoul memcpy memset strlen _snprintf _vsnprintf strcpy

advapi32

RegSetValueExA RegOpenKeyExA RegQueryInfoKeyA RegEnumValueA RegQueryValueExA RegCreateKeyExA RegCloseKey RegDeleteKeyA

shlwapi

SHGetValueA SHSetValueA SHDeleteValueA

wininet

InternetOpenA InternetConnectA HttpOpenRequestA InternetCloseHandle InternetQueryOptionA HttpEndRequestA InternetSetCookieA HttpAddRequestHeadersA HttpSendRequestA InternetQueryDataAvailable InternetReadFile InternetWriteFile HttpSendRequestExA InternetSetOptionA

kernel32

HeapReAlloc VirtualAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount CompareStringA CompareStringW SetEnvironmentVariableA WriteFile GetCommandLineA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA EnterCriticalSection LeaveCriticalSection GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualFree HeapDestroy HeapCreate GetEnvironmentStringsW OutputDebugStringA GetCurrentThreadId GetLastError HeapFree HeapValidate GetProcessHeap HeapAlloc SetLastError GetSystemTimeAsFileTime GetTimeFormatA GetDateFormatA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind RaiseException GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep WideCharToMultiByte GetTimeZoneInformation HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW