5fb32fe00cb58c0c7d7d3501df1a1130_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
5fb32fe00cb58c0c7d7d3501df1a1130_NeikiAnalytics.exe
Size 64KB
Sample240530-cggdaaae61
SHA256 5f9ed9415b370e83b6cabc6821e17c9eb3ae64e36f564bb56a658d3cc8602bdc
MD5 5fb32fe00cb58c0c7d7d3501df1a1130
SHA1 6e663343ee3d2935e7ea88b0b9297d8bbf4bf06a
SHA512 0ed0316901d14802dc5b06c785ed94ddb2831a6afe98d4cb143e312dcb5688af49411af26b3866a70d35530056316fe5f8a5fd7e74a0b2a7cf58d83a57154a5d
SSDEEP 768:tCru/e9Uw/E6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRuO4TW7ReOOG:URTzy48untU8fOMEI3jyYfPT4wOG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fb32fe00cb58c0c7d7d3501df1a1130_NeikiAnalytics.exe

File Explorer

5fb32fe00cb58c0c7d7d3501df1a1130_NeikiAnalytics.exe

.exe .vbs 64KB

5fb32fe00cb58c0c7d7d3501df1a1130_NeikiAnalytics.exe

IMPHASH 0818438d729451edf8c455424695687b
SHA256 5f9ed9415b370e83b6cabc6821e17c9eb3ae64e36f564bb56a658d3cc8602bdc
MD5 5fb32fe00cb58c0c7d7d3501df1a1130
SHA1 6e663343ee3d2935e7ea88b0b9297d8bbf4bf06a
SHA512 0ed0316901d14802dc5b06c785ed94ddb2831a6afe98d4cb143e312dcb5688af49411af26b3866a70d35530056316fe5f8a5fd7e74a0b2a7cf58d83a57154a5d
SSDEEP 768:tCru/e9Uw/E6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRuO4TW7ReOOG:URTzy48untU8fOMEI3jyYfPT4wOG
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset strncmp memmove strncpy _strnicmp strlen strcmp strcpy strcat sprintf fabs ceil malloc floor free fclose memcpy _stricmp tolower

kernel32

GetModuleHandleA HeapCreate GetCommandLineA RemoveDirectoryA GetTempFileNameA GetShortPathNameA HeapDestroy ExitProcess FindResourceA LoadResource SizeofResource HeapAlloc HeapFree Sleep LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetCurrentProcessId CloseHandle InitializeCriticalSection GetModuleFileNameA GetEnvironmentVariableA SetEnvironmentVariableA GetCurrentProcess DuplicateHandle CreatePipe GetStdHandle CreateProcessA WaitForSingleObject EnterCriticalSection LeaveCriticalSection PeekNamedPipe GetExitCodeProcess TerminateProcess SetUnhandledExceptionFilter GetVersionExA HeapReAlloc SetLastError TlsAlloc GetCurrentDirectoryA SetCurrentDirectoryA GetTempPathA SetFileAttributesA DeleteFileA CreateDirectoryA WriteFile CreateFileA SetFilePointer ReadFile DeleteCriticalSection

user32

MessageBoxA SendMessageA PostMessageA GetWindowThreadProcessId IsWindowVisible GetWindowLongA GetForegroundWindow IsWindowEnabled EnableWindow EnumWindows SetWindowPos DestroyWindow GetDC GetWindowTextLengthA GetWindowTextA SetRect DrawTextA GetSystemMetrics ReleaseDC GetSysColor GetSysColorBrush CreateWindowExA CallWindowProcA SetWindowLongA SetFocus RedrawWindow RemovePropA DefWindowProcA SetPropA GetParent GetPropA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRectEx ShowWindow CreateAcceleratorTableA PeekMessageA MsgWaitForMultipleObjects GetMessageA GetActiveWindow TranslateAcceleratorA TranslateMessage DispatchMessageA GetFocus GetClientRect FillRect EnumChildWindows DefFrameProcA GetWindowRect IsChild GetClassNameA GetKeyState DestroyIcon RegisterWindowMessageA

gdi32

GetStockObject SelectObject SetBkColor SetTextColor GetTextExtentPoint32A CreateSolidBrush DeleteObject GetObjectA CreateCompatibleDC GetDIBits DeleteDC GetObjectType CreateDIBSection BitBlt CreateBitmap SetPixel

comctl32

InitCommonControlsEx

ole32

CoInitialize CoTaskMemFree RevokeDragDrop

shell32

ShellExecuteExA

winmm

timeBeginPeriod

shlwapi

PathRemoveArgsA PathGetArgsA PathAddBackslashA PathQuoteSpacesA

Name

.code

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.htext

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

5fb32fe00cb58c0c7d7d3501df1a1130_NeikiAnalytics.exe

msvcrt

kernel32

user32

gdi32

comctl32

ole32

shell32

winmm

shlwapi

generic