5da293fc2452473288ca3956ca0e4540_NeikiAnalytics[.]exe

General

Target
5da293fc2452473288ca3956ca0e4540_NeikiAnalytics.exe
Size 1.3MB
Sample240526-d82c7sec95
SHA256 7a516194bdbb7e91f1216a930b34a0de9dcd366044fc3f6ae8ac92b04099ce21
MD5 5da293fc2452473288ca3956ca0e4540
SHA1 e613254422fb0f89a6d7e50315dc7702614c6721
SHA512 fc1fc4991019ae3994afb00afbaee5148f8319958732315e2a14a910254a317059b928a08c19484cd2f0dde7988bd583619ccf1ec52dbaf866cbfc85ccb3257e
SSDEEP 24576:DtPmwTSLEoWjLVcCaMngXllMWV4lid/T5nrl8j3zN1cZadLlvt944/Us02OK5WZa:DtewTSLEoWjpc/W+oUt+j35K4l9X/UZk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5da293fc2452473288ca3956ca0e4540_NeikiAnalytics.exe

File Explorer

5da293fc2452473288ca3956ca0e4540_NeikiAnalytics.exe

.exe 1.3MB

5da293fc2452473288ca3956ca0e4540_NeikiAnalytics.exe

IMPHASH f3e974452807d25c2b9375c00e84e2c2
SHA256 7a516194bdbb7e91f1216a930b34a0de9dcd366044fc3f6ae8ac92b04099ce21
MD5 5da293fc2452473288ca3956ca0e4540
SHA1 e613254422fb0f89a6d7e50315dc7702614c6721
SHA512 fc1fc4991019ae3994afb00afbaee5148f8319958732315e2a14a910254a317059b928a08c19484cd2f0dde7988bd583619ccf1ec52dbaf866cbfc85ccb3257e
SSDEEP 24576:DtPmwTSLEoWjLVcCaMngXllMWV4lid/T5nrl8j3zN1cZadLlvt944/Us02OK5WZa:DtewTSLEoWjpc/W+oUt+j35K4l9X/UZk
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4962

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

g:\Acro_root_apqo\Main\code\build\win\results\Release\info\sea.pdb

shlwapi

PathAppendW

shell32

ShellExecuteExW SHFileOperationW

kernel32

TlsGetValue ExitProcess GetCommandLineW GetTempFileNameW SetFilePointer HeapAlloc HeapFree CreateDirectoryW WaitForSingleObject GetModuleHandleW GetProcessHeap WriteFile GetExitCodeProcess GetFileAttributesW ReadFile GetModuleFileNameW CreateFileW MultiByteToWideChar GetTempPathW GetLastError GetProcAddress CloseHandle DeleteFileW CreateThread GetCommandLineA GetStartupInfoA HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetUnhandledExceptionFilter Sleep GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType RaiseException TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

TranslateMessage DispatchMessageW GetMessageW

Sharing