10428b8df468f397614fbd8a191791a0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
10428b8df468f397614fbd8a191791a0_NeikiAnalytics.exe
Size 1.5MB
Sample240603-3a7vrscg2y
SHA256 20fc4d8e9aa8b49342ce4c2aad3a2ef8376773e815e811ded9fecbff6d33d088
MD5 10428b8df468f397614fbd8a191791a0
SHA1 532ceb154513b9f1ffce0a0d8c858dc5e0f20521
SHA512 f493ae9c4303ea0b831365ca72f6f13c409db78f272c21af67a66531a070dc230b2da1c3ca7ca26d48f80ce8cace8274a9fd5c7e0301064816c7de222369c759
SSDEEP 12288:HtYqT2VRWuZxpUkCuPPJh0i1iGO9T0xmh56PmPMvzLFs:5TcWQxpUkCsPJB1iHphIPmE75
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10428b8df468f397614fbd8a191791a0_NeikiAnalytics.exe

File Explorer

10428b8df468f397614fbd8a191791a0_NeikiAnalytics.exe

.exe 1.5MB

10428b8df468f397614fbd8a191791a0_NeikiAnalytics.exe

IMPHASH 89ad82854409b9dd81837c899d65f03e
SHA256 20fc4d8e9aa8b49342ce4c2aad3a2ef8376773e815e811ded9fecbff6d33d088
MD5 10428b8df468f397614fbd8a191791a0
SHA1 532ceb154513b9f1ffce0a0d8c858dc5e0f20521
SHA512 f493ae9c4303ea0b831365ca72f6f13c409db78f272c21af67a66531a070dc230b2da1c3ca7ca26d48f80ce8cace8274a9fd5c7e0301064816c7de222369c759
SSDEEP 12288:HtYqT2VRWuZxpUkCuPPJh0i1iGO9T0xmh56PmPMvzLFs:5TcWQxpUkCsPJB1iHphIPmE75
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

CoInitialize CoCreateInstance CoUninitialize

comctl32

PropertySheetA CreatePropertySheetPageA

kernel32

LocalFree FormatMessageA FreeLibrary GetModuleHandleA GetVersionExA DeleteFileA GetPrivateProfileIntA GetPrivateProfileStringA ResumeThread SetPriorityClass GetCurrentProcess GetCurrentThread MultiByteToWideChar CreateProcessA GetModuleFileNameA RemoveDirectoryA GetFileSize GetTempFileNameA GetTempPathA LoadLibraryA GetProcAddress GetFileAttributesA GetStartupInfoA SetLastError MapViewOfFile CreateDirectoryA lstrlenA UnmapViewOfFile CreateFileA GetLastError DosDateTimeToFileTime SetFileTime CloseHandle CreateFileMappingA SetThreadPriority

user32

RegisterClassA CreateWindowExA ShowWindow UpdateWindow LoadCursorA SetCursor PeekMessageA TranslateMessage DispatchMessageA GetDlgItem GetWindowRect MoveWindow GetDC ReleaseDC SendDlgItemMessageA GetParent wsprintfA SetDlgItemTextA PostMessageA DefWindowProcA BeginPaint GetSystemMetrics EndPaint SendMessageA GetFocus MessageBoxA

gdi32

SelectObject TextOutA CreateDIBitmap CreateSolidBrush SetTextColor CreateFontA SetBkMode DeleteObject

advapi32

RegCloseKey RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegQueryValueA RegEnumKeyExA RegQueryValueExA RegOpenKeyExA

shell32

ShellExecuteA

msvcrt

_acmdln exit _XcptFilter _exit __p___argc __p___argv strncmp fgets realloc qsort __mb_cur_max __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _open _controlfp _strcmpi _strdup _tempnam _close _read _strnicmp _isctype _pctype strchr memcpy memset strncat strcat strlen strcpy strcmp strrchr fprintf _vsnprintf malloc _snprintf strncpy free sscanf _putenv remove fread ftell fseek fopen fclose fflush freopen _iob fwrite strftime localtime time sprintf _fstat strtol