51628237c18370e218c8c7a458f44610_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
51628237c18370e218c8c7a458f44610_NeikiAnalytics.exe
Size 761KB
Sample240529-mlkllsbf4z
SHA256 1fd02918d7f06c4fa61de3c5e7f6469d26e16040fae3fcc13d0170af3a4b6d92
MD5 51628237c18370e218c8c7a458f44610
SHA1 ba7f5b58f8270dcbe5578b5e63793aae0e8f16aa
SHA512 855386d537c4c99de1b6f43a6911924ad4670e9d3b21dea33438dcdeb8475887cef4dee27c2e9eb64cf541beddd1e11a228f1bbf2c3535e2539a742ac03fa267
SSDEEP 12288:6GjbStYv3ucxL5oEpZPBMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:6gbS+ntqEpZPaSkQ/7Gb8NLEbeZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51628237c18370e218c8c7a458f44610_NeikiAnalytics.exe

File Explorer

51628237c18370e218c8c7a458f44610_NeikiAnalytics.exe

.exe 761KB

51628237c18370e218c8c7a458f44610_NeikiAnalytics.exe

IMPHASH 311112514f6836afa6f49087e0181d9d
SHA256 1fd02918d7f06c4fa61de3c5e7f6469d26e16040fae3fcc13d0170af3a4b6d92
MD5 51628237c18370e218c8c7a458f44610
SHA1 ba7f5b58f8270dcbe5578b5e63793aae0e8f16aa
SHA512 855386d537c4c99de1b6f43a6911924ad4670e9d3b21dea33438dcdeb8475887cef4dee27c2e9eb64cf541beddd1e11a228f1bbf2c3535e2539a742ac03fa267
SSDEEP 12288:6GjbStYv3ucxL5oEpZPBMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:6gbS+ntqEpZPaSkQ/7Gb8NLEbeZ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

84065

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\_work\1\s\\binaries\x86ret\bin\i386\VCTIP.pdb

vcruntime140

memcpy _except_handler4_common __std_exception_copy _CxxThrowException memset __current_exception __std_exception_destroy __current_exception_context __FrameUnwindFilter memmove __std_terminate __CxxFrameHandler3

msvcp140

?_Syserror_map@std@@YAPBDH@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_Winerror_map@std@@YAHH@Z

advapi32

RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegGetValueW RegDeleteValueW RegCloseKey

kernel32

AreFileApisANSI GetFileAttributesExW GetFileInformationByHandleEx WideCharToMultiByte SetFileInformationByHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess GetTickCount64 ReadFile CreateNamedPipeW WaitForMultipleObjects CreateMutexW ReleaseMutex DisconnectNamedPipe CreateEventW CloseThreadpoolCleanupGroupMembers GetLastError SetEvent CloseHandle CreateThreadpoolCleanupGroup SetThreadpoolTimer RaiseException CreateThreadpoolTimer GetOverlappedResult SubmitThreadpoolWork ConnectNamedPipe CreateThreadpoolWork GetModuleFileNameW CreateFileW LocalFree FormatMessageA FindClose FindFirstFileExW FindNextFileW Sleep

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _invalid_parameter_noinfo_noreturn _set_app_type _initialize_onexit_table _configure_wide_argv terminate _initialize_wide_environment _register_onexit_function _get_initial_wide_environment _controlfp_s _initterm _crt_atexit _register_thread_local_exe_atexit_callback _c_exit abort _cexit __p___wargv _initterm_e exit _exit __p___argc

api-ms-win-crt-math-l1-1-0

__setusermatherr ceil

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf __p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode _callnewh free

api-ms-win-crt-convert-l1-1-0

wcstoul

api-ms-win-crt-string-l1-1-0

wcsncmp

ole32

OleRun CoCreateInstance

oleaut32

SysFreeString

mscoree

_CorExeMain