9a2288c34fb98845f253f36ed4e9a4e0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
9a2288c34fb98845f253f36ed4e9a4e0_NeikiAnalytics.exe
Size 764KB
Sample240603-d6kmnsbc32
SHA256 3bcd2444b47631e87acfdf39c703031f3aca23abcea1b315d73d95bcb17cad84
MD5 9a2288c34fb98845f253f36ed4e9a4e0
SHA1 1ce0125d5028b52ee88d9a894d94dc7e599e1b09
SHA512 e6e999f5ccf8f82b8cbe798c5c32c712aedae8bbc7e1c5958cebf55dad91b392f32112a305e3c9574522fc474b01a39b31186569b6a4cb513fcc6f7bc2970089
SSDEEP 12288:hJheLDF+GBXYT7Ose6FPmg3TstG2lqfn3tBzqgf/lvusL+o:hJhGgGJIJe6FPmg312lqfn3POS/lmsLL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a2288c34fb98845f253f36ed4e9a4e0_NeikiAnalytics.exe

File Explorer

9a2288c34fb98845f253f36ed4e9a4e0_NeikiAnalytics.exe

.dll 764KB

9a2288c34fb98845f253f36ed4e9a4e0_NeikiAnalytics.exe

IMPHASH 3a54e861d3d9d8c5cf26fa2949d55f6d
SHA256 3bcd2444b47631e87acfdf39c703031f3aca23abcea1b315d73d95bcb17cad84
MD5 9a2288c34fb98845f253f36ed4e9a4e0
SHA1 1ce0125d5028b52ee88d9a894d94dc7e599e1b09
SHA512 e6e999f5ccf8f82b8cbe798c5c32c712aedae8bbc7e1c5958cebf55dad91b392f32112a305e3c9574522fc474b01a39b31186569b6a4cb513fcc6f7bc2970089
SSDEEP 12288:hJheLDF+GBXYT7Ose6FPmg3TstG2lqfn3tBzqgf/lvusL+o:hJhGgGJIJe6FPmg312lqfn3POS/lmsLL
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

209760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetCommandLineA HeapFree HeapAlloc GetProcessHeap RtlLookupFunctionEntry RtlUnwindEx HeapReAlloc RaiseException RtlPcToFileHeader HeapSize VirtualProtect GetSystemInfo VirtualQuery TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext FlsGetValue FlsFree FlsAlloc Sleep HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetStdHandle GetFileType FlsSetValue GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCPInfo GetACP GetOEMCP GetTimeZoneInformation GetConsoleCP GetConsoleMode GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA GetSystemTimeAsFileTime GetTickCount GetFileTime GetFileAttributesW FileTimeToLocalFileTime CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW FileTimeToSystemTime GetThreadLocale lstrlenA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue GlobalHandle GlobalReAlloc TlsAlloc InitializeCriticalSection EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags CloseHandle GetCurrentProcessId GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW LoadLibraryA lstrcmpW GetVersionExA GlobalAlloc FormatMessageW LocalFree GlobalFree FreeResource GlobalLock GlobalUnlock MulDiv GetModuleHandleA MultiByteToWideChar lstrlenW WideCharToMultiByte FreeLibrary GetModuleFileNameW LockResource VirtualAlloc GetProcAddress SetLastError GetLastError SizeofResource LoadLibraryW GetModuleHandleW LoadResource FindResourceW GetStartupInfoA ExitProcess

user32

CopyAcceleratorTableW IsRectEmpty InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatW PostThreadMessageW GetSysColorBrush GetMessageW TranslateMessage GetCursorPos ValidateRect SetWindowContextHelpId MapDialogRect GetWindowThreadProcessId SetCursor PostQuitMessage ShowWindow MoveWindow SetWindowTextW IsDialogMessageW RegisterWindowMessageW SendDlgItemMessageA SendDlgItemMessageW WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassNameW GetClassLongPtrW SetPropW GetPropW RemovePropW GetForegroundWindow GetLastActivePopup DispatchMessageW CharNextW GetWindowLongPtrW SetWindowLongPtrW GetMessageTime GetMessagePos PeekMessageW MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible GetMenu PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetMenuItemID GetMenuItemCount GetSubMenu GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen ScreenToClient GrayStringW DrawTextExW DrawTextW TabbedTextOutW ReleaseDC GetDC CharUpperW DestroyMenu GetTopWindow CopyRect IsWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem UnhookWindowsHookEx GetWindowTextLengthW GetWindowTextW GetParent GetWindow SetFocus SetCapture ReleaseCapture UpdateWindow GetWindowRect IsIconic LoadCursorW DrawIcon GetClientRect LoadIconW SetRect InvalidateRect GetWindowLongW SetWindowLongW GetSystemMetrics SendMessageW EnableWindow MessageBoxW UnregisterClassA

gdi32

ExtSelectClipRgn DeleteDC ExtTextOutW GetStockObject GetDeviceCaps GetMapMode GetBkColor GetTextColor GetRgnBox TextOutW RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject CreateBitmap GetWindowExtEx GetViewportExtEx GetObjectW DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateRectRgnIndirect Escape

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegCloseKey

shlwapi

PathFindFileNameW PathStripToRootW PathFindExtensionW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree CoLoadLibrary OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysAllocStringLen VariantInit VariantChangeType VariantClear SysFreeString SysStringLen