525bfc76b236fa42b9374eafd97cc750_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
525bfc76b236fa42b9374eafd97cc750_NeikiAnalytics.exe
Size 212KB
Sample240529-m45phada84
SHA256 849a5e7eff6eef790e95051dec8396cdf0ff2c1286ba304e0e3e09a1135bf811
MD5 525bfc76b236fa42b9374eafd97cc750
SHA1 b79408a675b7aecce7367002e9ee188bf9ea2014
SHA512 e607df56fba91695a1316c6a66ed237086df7beb0d694497106a1b3bded10351a1c344bb71e42c74f0cf23b95c0dd607e2e393563585e9d88929217559bdf801
SSDEEP 3072:lGwPsm1VrwxOsf0juzv8j4P1Hr6krr4IEhx9QZe2gO9mG9UHA30Vt3E/vDjb:lG/iVkO20SFgBhxtW9mG9+Umt3Ezjb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
525bfc76b236fa42b9374eafd97cc750_NeikiAnalytics.exe

File Explorer

525bfc76b236fa42b9374eafd97cc750_NeikiAnalytics.exe

.exe 212KB

525bfc76b236fa42b9374eafd97cc750_NeikiAnalytics.exe

IMPHASH 728b5168c443fc8cea3c0c483ddbb8ff
SHA256 849a5e7eff6eef790e95051dec8396cdf0ff2c1286ba304e0e3e09a1135bf811
MD5 525bfc76b236fa42b9374eafd97cc750
SHA1 b79408a675b7aecce7367002e9ee188bf9ea2014
SHA512 e607df56fba91695a1316c6a66ed237086df7beb0d694497106a1b3bded10351a1c344bb71e42c74f0cf23b95c0dd607e2e393563585e9d88929217559bdf801
SSDEEP 3072:lGwPsm1VrwxOsf0juzv8j4P1Hr6krr4IEhx9QZe2gO9mG9UHA30Vt3E/vDjb:lG/iVkO20SFgBhxtW9mG9+Umt3Ezjb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDrives GetProcAddress GetCurrentThread WaitForMultipleObjects GlobalAlloc OpenMutexA InitializeCriticalSection AddAtomA CompareStringA CopyFileA IsValidLocale lstrcpynA OpenEventW GetModuleHandleA GetStartupInfoA GetSystemDefaultLCID GetACP GetCalendarInfoW OpenWaitableTimerA Sleep GetSystemDefaultLangID CreateSemaphoreW ExpandEnvironmentStringsW lstrlenA GetDateFormatA CreateMailslotW SystemTimeToFileTime BeginUpdateResourceA GetExpandedNameW SearchPathA DosDateTimeToFileTime GetWindowsDirectoryW GetEnvironmentStringsW GetStringTypeA QueryPerformanceCounter

user32

GetDlgItemTextW DialogBoxParamA LoadMenuIndirectW GetCapture GetClassInfoW IsIconic LoadBitmapA GetDC PeekMessageW GetMenuState SetWindowTextW GetWindowRect UpdateWindow GetForegroundWindow DialogBoxIndirectParamA ShowWindow EnumClipboardFormats AdjustWindowRect SetCursorPos ReleaseDC InsertMenuA CreateWindowExA ActivateKeyboardLayout LoadIconW DrawTextA DialogBoxIndirectParamW

gdi32

FillPath UnrealizeObject SetDIBits CreateScalableFontResourceW GetTextFaceA CreateFontW SelectClipRgn AnimatePalette

advapi32

RegOpenKeyExA RegOpenKeyW RegDeleteKeyA RegOpenKeyW

shlwapi

SHRegGetBoolUSValueW PathIsUNCServerShareA PathRemoveExtensionA PathGetDriveNumberW IntlStrEqWorkerA PathMakePrettyA StrCmpNIW UrlCombineW

comctl32

DrawStatusText CreateMappedBitmap ImageList_Write

inetcomm

MimeOleGenerateCID MimeOleSetBodyPropW EssKeyExchPreferenceDecodeEx CreateSMTPTransport MimeOleSMimeCapInit MimeOleSMimeCapGetHashAlg MimeEditIsSafeToRun MimeOleParseMhtmlUrl EssSecurityLabelEncodeEx MimeOleGetRelatedSection MimeOleGetFileInfoW EssReceiptRequestEncodeEx MimeOleCreateSecurity MimeOleFileTimeToInetDate MimeOleSMimeCapGetEncAlg MimeOleGetInternat MimeOleSMimeCapAddCert EssSignCertificateDecodeEx

oledlg

OleUIObjectPropertiesW OleUIConvertW OleUIPasteSpecialW OleUIConvertA OleUIPromptUserA OleUIAddVerbMenuW OleUIEditLinksA OleUIPasteSpecialA

Name

.qYS

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.jvNc

Size

2KB

Virtual Size

405KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bCq

Size

3KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gMFODl

Size

3KB

Virtual Size

329KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

109KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ifpDc

Size

3KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Ox

Size

2KB

Virtual Size

474KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

740B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

525bfc76b236fa42b9374eafd97cc750_NeikiAnalytics.exe

kernel32

user32

gdi32

advapi32

shlwapi

comctl32

inetcomm

oledlg

generic