0c331bc08f6a6d23655c8d8d4aa6e690_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
0c331bc08f6a6d23655c8d8d4aa6e690_NeikiAnalytics.exe
Size 744KB
Sample240603-2jt5labf4t
SHA256 a43b1f247dd9ce4971e488855eb51516f1278863826e195c52200c2b368abfc5
MD5 0c331bc08f6a6d23655c8d8d4aa6e690
SHA1 72a5a6e1e99dccbac21b994291da2d06129ad4fc
SHA512 a4df94b5df6852761d7de57d3a30de823fb1140fcd75ea217e731dba4838bb832d1ce2a0f41b47513e2113b1176ff0c002d997c1de78d70ece1a9dfb4de6cf50
SSDEEP 12288:Njl4znBPfoH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:1lyBE2JOt934J7Z6bQaj1BvUm9J
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c331bc08f6a6d23655c8d8d4aa6e690_NeikiAnalytics.exe

File Explorer

0c331bc08f6a6d23655c8d8d4aa6e690_NeikiAnalytics.exe

.exe 744KB

0c331bc08f6a6d23655c8d8d4aa6e690_NeikiAnalytics.exe

IMPHASH 1a6139bca24492ee5163ffe299aaa6f6
SHA256 a43b1f247dd9ce4971e488855eb51516f1278863826e195c52200c2b368abfc5
MD5 0c331bc08f6a6d23655c8d8d4aa6e690
SHA1 72a5a6e1e99dccbac21b994291da2d06129ad4fc
SHA512 a4df94b5df6852761d7de57d3a30de823fb1140fcd75ea217e731dba4838bb832d1ce2a0f41b47513e2113b1176ff0c002d997c1de78d70ece1a9dfb4de6cf50
SSDEEP 12288:Njl4znBPfoH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:1lyBE2JOt934J7Z6bQaj1BvUm9J
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

82992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

DXCapsViewer.pdb

kernel32

FreeLibrary GetProcAddress LoadLibraryExA WriteFile HeapFree GlobalUnlock GlobalLock GlobalAlloc GetNumberFormatA GetCommandLineA GetProcessHeap HeapAlloc CloseHandle CreateFileA GetLocaleInfoA LocalAlloc GetEnvironmentVariableA GetModuleHandleA Sleep GetStartupInfoW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount ExpandEnvironmentStringsA GetModuleFileNameA

gdi32

EndDoc StartPage StartDocA GetDeviceCaps DeleteDC GetTextMetricsA CreateFontIndirectA TextOutA SelectObject EndPage SetAbortProc

user32

ScreenToClient PostMessageA GetDC DestroyWindow LoadCursorA GetMenu DispatchMessageA LoadImageA GetMessageA LoadMenuA DeferWindowPos EnableWindow GetParent EnableMenuItem GetWindowLongPtrA PeekMessageA CreateDialogParamA IsDialogMessageA LoadStringA GetSystemMenu DestroyIcon GetSystemMetrics CloseClipboard EmptyClipboard GetWindowTextA SetWindowTextA MessageBoxA RegisterClassA DefWindowProcA DestroyMenu CreateWindowExA SetFocus TranslateMessage SendMessageA SetCapture EndDeferWindowPos SetClipboardData LoadIconA SystemParametersInfoA CheckMenuItem GetClientRect GetDlgItem PostQuitMessage EndDialog DialogBoxParamA TrackPopupMenu OpenClipboard GetSubMenu SetMenuItemInfoA GetMenuStringA ReleaseCapture InvalidateRect IsIconic ReleaseDC GetCursorPos BeginDeferWindowPos ShowWindow

msvcrt

strcpy_s vsprintf_s ?terminate@@YAXXZ _commode _fmode _acmdln __C_specific_handler __setusermatherr _initterm memset _ismbblead _cexit _exit exit __set_app_type __getmainargs _amsg_exit _XcptFilter free _callnewh malloc wcstombs sprintf_s strrchr strcat_s

comctl32

ImageList_ReplaceIcon ImageList_Create ord4 ImageList_Destroy ord17

comdlg32

PrintDlgA

ole32

CoInitialize CoUninitialize

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

shell32

SHGetFolderPathA

shlwapi

PathFileExistsA PathRemoveFileSpecA PathAppendA

ddraw

DirectDrawEnumerateExA DirectDrawCreateEx

d3d9

Direct3DCreate9

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA

Name

.text

Size

79KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

0c331bc08f6a6d23655c8d8d4aa6e690_NeikiAnalytics.exe

kernel32

gdi32

user32

msvcrt

comctl32

comdlg32

ole32

version

shell32

shlwapi

ddraw

d3d9

advapi32

generic