0ae7e32ad58fe0ab1ff0cba5da51ed80_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
0ae7e32ad58fe0ab1ff0cba5da51ed80_NeikiAnalytics.exe
Size 764KB
Sample240527-w38jfaed22
SHA256 4052deeb893e2306fd7bfa4293bd164de973cfff3dd58341122a8d1f4a291e9c
MD5 0ae7e32ad58fe0ab1ff0cba5da51ed80
SHA1 7d6000cd98961aa94f696002d9f5b0a2a5b97c7f
SHA512 f7d2499c9ee3b778effea5a26a4f24ecd49bba215f65c152d3c238314c54ff9a5bdefa425ed92f9bb5067357f55a0862360ffb026b733a71587649348ae3f861
SSDEEP 12288:hJheLDF+GBXYT7Ose6FPmg3TBtG2lqfn3tBzqgf/lvusL+o:hJhGgGJIJe6FPmg3a2lqfn3POS/lmsLL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ae7e32ad58fe0ab1ff0cba5da51ed80_NeikiAnalytics.exe

File Explorer

0ae7e32ad58fe0ab1ff0cba5da51ed80_NeikiAnalytics.exe

.dll 764KB

0ae7e32ad58fe0ab1ff0cba5da51ed80_NeikiAnalytics.exe

IMPHASH 3a54e861d3d9d8c5cf26fa2949d55f6d
SHA256 4052deeb893e2306fd7bfa4293bd164de973cfff3dd58341122a8d1f4a291e9c
MD5 0ae7e32ad58fe0ab1ff0cba5da51ed80
SHA1 7d6000cd98961aa94f696002d9f5b0a2a5b97c7f
SHA512 f7d2499c9ee3b778effea5a26a4f24ecd49bba215f65c152d3c238314c54ff9a5bdefa425ed92f9bb5067357f55a0862360ffb026b733a71587649348ae3f861
SSDEEP 12288:hJheLDF+GBXYT7Ose6FPmg3TBtG2lqfn3tBzqgf/lvusL+o:hJhGgGJIJe6FPmg3a2lqfn3POS/lmsLL
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

209760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetCommandLineA HeapFree HeapAlloc GetProcessHeap RtlLookupFunctionEntry RtlUnwindEx HeapReAlloc RaiseException RtlPcToFileHeader HeapSize VirtualProtect GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext FlsGetValue FlsFree FlsAlloc Sleep HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetStdHandle GetFileType FlsSetValue GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCPInfo GetACP GetOEMCP GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA GetSystemTimeAsFileTime GetTickCount GetFileTime GetFileAttributesW FileTimeToLocalFileTime CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW FileTimeToSystemTime GetThreadLocale lstrlenA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags CloseHandle GetCurrentProcessId GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW LoadLibraryA lstrcmpW GetVersionExA GlobalAlloc FormatMessageW LocalFree GlobalFree FreeResource GlobalLock GlobalUnlock MulDiv GetModuleHandleA MultiByteToWideChar lstrlenW WideCharToMultiByte FreeLibrary GetModuleFileNameW LockResource VirtualAlloc GetProcAddress SetLastError GetLastError SizeofResource LoadLibraryW GetModuleHandleW LoadResource FindResourceW GetStartupInfoA ExitProcess

user32

CopyAcceleratorTableW IsRectEmpty InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatW PostThreadMessageW GetSysColorBrush GetMessageW TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect GetWindowThreadProcessId SetCursor PostQuitMessage ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageA SendDlgItemMessageW WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassNameW GetClassLongPtrW SetPropW GetPropW RemovePropW GetForegroundWindow GetLastActivePopup DispatchMessageW CharNextW GetWindowLongPtrW SetWindowLongPtrW GetMessageTime GetMessagePos PeekMessageW MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetMenuItemID GetMenuItemCount GetSubMenu GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW ReleaseDC GetDC CharUpperW DestroyMenu GetTopWindow CopyRect IsWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem UnhookWindowsHookEx GetWindowTextLengthW GetWindowTextW GetParent GetWindow SetFocus SetCapture ReleaseCapture UpdateWindow GetWindowRect IsIconic LoadCursorW DrawIcon GetClientRect LoadIconW SetRect InvalidateRect GetWindowLongW SetWindowLongW GetSystemMetrics SendMessageW EnableWindow MessageBoxW UnregisterClassA

gdi32

ExtSelectClipRgn DeleteDC ExtTextOutW GetStockObject GetDeviceCaps GetMapMode GetBkColor GetTextColor GetRgnBox TextOutW RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject CreateBitmap GetWindowExtEx GetViewportExtEx GetObjectW DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateRectRgnIndirect Escape

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegCloseKey

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CoLoadLibrary OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringLen VariantInit VariantChangeType VariantClear SysFreeString SysStringLen