78212682e8630cff3380ba7684d296d0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
78212682e8630cff3380ba7684d296d0_NeikiAnalytics.exe
Size 65KB
Sample240602-2jp6msaf82
SHA256 1edd34321d435b4e30564f4cc801647385ffeb15f5f027f94cd946671acaad82
MD5 78212682e8630cff3380ba7684d296d0
SHA1 879f0ceed063ec2d6cd59ac0b1d61e70270c508e
SHA512 2489d1629a1d52599c030853fc0824dffaa26927314e17b40a28090eb44051377b21e29ada9f570008e4b581a454c3ebc29288089a3e0a91c76aeb2a31cda265
SSDEEP 768:heQIvFKPZo2smEasjcj29NWngAHxcw9ppEaxglaX5uAS:h9IvEPZo6Ead29NQgA2wQle56
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78212682e8630cff3380ba7684d296d0_NeikiAnalytics.exe

File Explorer

78212682e8630cff3380ba7684d296d0_NeikiAnalytics.exe

.exe 65KB

78212682e8630cff3380ba7684d296d0_NeikiAnalytics.exe

IMPHASH 9a423a1a41e11c85a6586c49a7e083df
SHA256 1edd34321d435b4e30564f4cc801647385ffeb15f5f027f94cd946671acaad82
MD5 78212682e8630cff3380ba7684d296d0
SHA1 879f0ceed063ec2d6cd59ac0b1d61e70270c508e
SHA512 2489d1629a1d52599c030853fc0824dffaa26927314e17b40a28090eb44051377b21e29ada9f570008e4b581a454c3ebc29288089a3e0a91c76aeb2a31cda265
SSDEEP 768:heQIvFKPZo2smEasjcj29NWngAHxcw9ppEaxglaX5uAS:h9IvEPZo6Ead29NQgA2wQle56
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

HttpSendRequestW InternetConnectW HttpOpenRequestW InternetSetPerSiteCookieDecisionW InternetOpenUrlW InternetAttemptConnect InternetOpenW InternetReadFile InternetClearAllPerSiteCookieDecisions InternetCloseHandle InternetQueryDataAvailable InternetSetOptionW

shlwapi

StrStrIW PathMatchSpecW PathCombineW wvnsprintfW StrStrIA PathRemoveFileSpecW

kernel32

TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetVersionExA GetSystemTime RtlUnwind WideCharToMultiByte MultiByteToWideChar HeapCreate CopyFileW CreateThread WaitForMultipleObjects GetTickCount DeleteFileW CreateProcessW SetUnhandledExceptionFilter ExitProcess GetLastError LoadLibraryW GetProcAddress Sleep VirtualProtect GetPrivateProfileIntW ExpandEnvironmentStringsW GetPrivateProfileStringW SetFilePointer SetEndOfFile GetVersionExW HeapAlloc SetWaitableTimer SystemTimeToFileTime CreateWaitableTimerW FindNextFileW HeapFree ReadFile GetModuleFileNameW GetFileTime WaitForSingleObject GetTimeZoneInformation CreateFileW CloseHandle GetFileSizeEx VirtualFree GetProcessHeap GetCurrentDirectoryW VirtualAlloc VirtualQuery HeapReAlloc GetFileSize FindClose WriteFile GetLocalTime FindFirstFileW GetModuleHandleW GetCommandLineW

user32

GetWindowLongW DispatchMessageW GetForegroundWindow CharLowerW CreateWindowExW FindWindowW PeekMessageW SetForegroundWindow GetSystemMetrics MessageBoxW SetWindowPos SetWindowLongW SetParent

advapi32

RegOpenKeyExW RegEnumKeyExW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

SHGetFolderPathW

ole32

CoCreateInstance OleInitialize CoInitialize

oleaut32

SysFreeString VariantInit SysAllocString VariantClear