e14fdb4bf1faa046e4769eb7f1189c60_NeikiAnalytics[.]exe

General

Target
e14fdb4bf1faa046e4769eb7f1189c60_NeikiAnalytics.exe
Size 1.7MB
Sample240530-rnqb4ace62
SHA256 f1a854cf630f6342901670ebf88aa4397820213a0f9bee441db456b116cc090b
MD5 e14fdb4bf1faa046e4769eb7f1189c60
SHA1 9c0a445ccf731ff479a99fa38824f431ca7d9af9
SHA512 0b8cff4813c1371d10909e12492e6f0da672b9c8c3a86dd5568370d504e40f9da455bd2855b36a3a9ab5ee4a94cf89fdbfc940ba3b30089d1df62213f9738743
SSDEEP 49152:QNcll11z74bQkdF9HSkpDjeiR/j573TSNmDY2/Q/SXh0eTfN3FeLL8FD5nb2LLPz:vllLsMD8F1b6TwY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e14fdb4bf1faa046e4769eb7f1189c60_NeikiAnalytics.exe

File Explorer

e14fdb4bf1faa046e4769eb7f1189c60_NeikiAnalytics.exe

.exe 1.7MB

e14fdb4bf1faa046e4769eb7f1189c60_NeikiAnalytics.exe

IMPHASH 6752eda56876b8755b7cf239cf9acd46
SHA256 f1a854cf630f6342901670ebf88aa4397820213a0f9bee441db456b116cc090b
MD5 e14fdb4bf1faa046e4769eb7f1189c60
SHA1 9c0a445ccf731ff479a99fa38824f431ca7d9af9
SHA512 0b8cff4813c1371d10909e12492e6f0da672b9c8c3a86dd5568370d504e40f9da455bd2855b36a3a9ab5ee4a94cf89fdbfc940ba3b30089d1df62213f9738743
SSDEEP 49152:QNcll11z74bQkdF9HSkpDjeiR/j573TSNmDY2/Q/SXh0eTfN3FeLL8FD5nb2LLPz:vllLsMD8F1b6TwY
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

434032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\s\_build\Windows\x86\release\tool\cppwinrt\cppwinrt.pdb

kernel32

GetModuleFileNameA HeapSize SetStdHandle UnmapViewOfFile MapViewOfFile CloseHandle CreateFileMappingA GetFileSizeEx CreateFileA GetProcessHeap ExpandEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter QueryPerformanceFrequency CreateDirectoryW CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW SetEndOfFile SetFilePointerEx AreFileApisANSI GetLastError MultiByteToWideChar WideCharToMultiByte FormatMessageW EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId EncodePointer DecodePointer RaiseException IsProcessorFeaturePresent QueueUserWorkItem GetModuleHandleExW SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress GetCPInfo WaitForSingleObjectEx Sleep CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW SetEvent ResetEvent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetCurrentThread GetThreadTimes FreeLibrary FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualAlloc VirtualProtect VirtualFree DuplicateHandle ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx LoadLibraryW RtlUnwind GetDriveTypeW GetFullPathNameW SetEnvironmentVariableW GetCurrentDirectoryW ExitProcess GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapReAlloc HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile ReadConsoleW IsValidCodePage GetACP GetOEMCP WriteConsoleW

advapi32

RegEnumKeyA RegCloseKey RegOpenKeyExW RegQueryValueExW

xmllite

CreateXmlReader

shlwapi

SHCreateStreamOnFileW

Sharing