cbf59617b60a36670e6245f5bdb183d0_NeikiAnalytics[.]exe

General

Target
cbf59617b60a36670e6245f5bdb183d0_NeikiAnalytics.exe
Size 791KB
Sample240531-xmnprshf2w
SHA256 13f1b8bc39a585aaefdaf25c8335455d10c04660b0c4cfc2709dc22f1b2b34a2
MD5 cbf59617b60a36670e6245f5bdb183d0
SHA1 1b8d0e01a955fdc1cb36a957e71477891320016a
SHA512 e56aaedebdbfcfc231b3609c5bbf4e0c1f946398c24353c2c5e6a8958e469b977f3f2721be496f5e1658022824a8cc08a84f51cd82e3ff21c806c60a93622d14
SSDEEP 12288:i0arICcwWWkWlLr3AMU1WBSv73cfYhpoDp63q3JeN4VNvqfkqHz:i0ar/FkOH2HgIa3nNMkC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbf59617b60a36670e6245f5bdb183d0_NeikiAnalytics.exe

File Explorer

cbf59617b60a36670e6245f5bdb183d0_NeikiAnalytics.exe

.exe 791KB

cbf59617b60a36670e6245f5bdb183d0_NeikiAnalytics.exe

IMPHASH b3f7368a77856522320ff0e8d452c570
SHA256 13f1b8bc39a585aaefdaf25c8335455d10c04660b0c4cfc2709dc22f1b2b34a2
MD5 cbf59617b60a36670e6245f5bdb183d0
SHA1 1b8d0e01a955fdc1cb36a957e71477891320016a
SHA512 e56aaedebdbfcfc231b3609c5bbf4e0c1f946398c24353c2c5e6a8958e469b977f3f2721be496f5e1658022824a8cc08a84f51cd82e3ff21c806c60a93622d14
SSDEEP 12288:i0arICcwWWkWlLr3AMU1WBSv73cfYhpoDp63q3JeN4VNvqfkqHz:i0ar/FkOH2HgIa3nNMkC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalDeleteAtom TryEnterCriticalSection GetNumaProcessorNode InterlockedDecrement GetComputerNameW GetTimeFormatA GetModuleHandleW EnumTimeFormatsA ActivateActCtx ReadFileScatter WriteConsoleOutputA InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetConsoleAliasW GetModuleFileNameW SetConsoleTitleA GetConsoleAliasesW SetLastError GetProcAddress GetProcessHeaps LocalLock LoadLibraryA UnhandledExceptionFilter FreeEnvironmentStringsW BuildCommDCBA CompareStringA GetShortPathNameW GetFileInformationByHandle LocalFileTimeToFileTime MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

Sharing