a0b8f35b8bc6701841fb8b99c0b04220_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a0b8f35b8bc6701841fb8b99c0b04220_NeikiAnalytics.exe
Size 61KB
Sample240603-mx6yzsdc37
SHA256 3bf61be5b1ba7c44ea0535f8060a6f8ea1bd1d0ff3c7aac3a3609934f8cecf22
MD5 a0b8f35b8bc6701841fb8b99c0b04220
SHA1 b720df19444f82028338145d1d847dcb0e20a806
SHA512 047e231d9c0cc2271dd3d9097dbd995dff0d0db9eea9fae3c6467a219185c99b057749f6b7494a4c73972fb52c19d540158f6400ad87b611656f35c55c2f4be7
SSDEEP 768:vCru/f9Uw/E6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRuO4TW7ReOOh:7RTzy48untU8fOMEI3jyYfPT4wOh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0b8f35b8bc6701841fb8b99c0b04220_NeikiAnalytics.exe

File Explorer

a0b8f35b8bc6701841fb8b99c0b04220_NeikiAnalytics.exe

.exe .vbs 61KB

a0b8f35b8bc6701841fb8b99c0b04220_NeikiAnalytics.exe

IMPHASH 0818438d729451edf8c455424695687b
SHA256 3bf61be5b1ba7c44ea0535f8060a6f8ea1bd1d0ff3c7aac3a3609934f8cecf22
MD5 a0b8f35b8bc6701841fb8b99c0b04220
SHA1 b720df19444f82028338145d1d847dcb0e20a806
SHA512 047e231d9c0cc2271dd3d9097dbd995dff0d0db9eea9fae3c6467a219185c99b057749f6b7494a4c73972fb52c19d540158f6400ad87b611656f35c55c2f4be7
SSDEEP 768:vCru/f9Uw/E6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRuO4TW7ReOOh:7RTzy48untU8fOMEI3jyYfPT4wOh
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset strncmp memmove strncpy _strnicmp strlen strcmp strcpy strcat sprintf fabs ceil malloc floor free fclose memcpy _stricmp tolower

kernel32

GetModuleHandleA HeapCreate GetCommandLineA RemoveDirectoryA GetTempFileNameA GetShortPathNameA HeapDestroy ExitProcess FindResourceA LoadResource SizeofResource HeapAlloc HeapFree Sleep LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetCurrentProcessId CloseHandle InitializeCriticalSection GetModuleFileNameA GetEnvironmentVariableA SetEnvironmentVariableA GetCurrentProcess DuplicateHandle CreatePipe GetStdHandle CreateProcessA WaitForSingleObject EnterCriticalSection LeaveCriticalSection PeekNamedPipe GetExitCodeProcess TerminateProcess SetUnhandledExceptionFilter GetVersionExA HeapReAlloc SetLastError TlsAlloc GetCurrentDirectoryA SetCurrentDirectoryA GetTempPathA SetFileAttributesA DeleteFileA CreateDirectoryA WriteFile CreateFileA SetFilePointer ReadFile DeleteCriticalSection

user32

MessageBoxA SendMessageA PostMessageA GetWindowThreadProcessId IsWindowVisible GetWindowLongA GetForegroundWindow IsWindowEnabled EnableWindow EnumWindows SetWindowPos DestroyWindow GetDC GetWindowTextLengthA GetWindowTextA SetRect DrawTextA GetSystemMetrics ReleaseDC GetSysColor GetSysColorBrush CreateWindowExA CallWindowProcA SetWindowLongA SetFocus RedrawWindow RemovePropA DefWindowProcA SetPropA GetParent GetPropA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRectEx ShowWindow CreateAcceleratorTableA PeekMessageA MsgWaitForMultipleObjects GetMessageA GetActiveWindow TranslateAcceleratorA TranslateMessage DispatchMessageA GetFocus GetClientRect FillRect EnumChildWindows DefFrameProcA GetWindowRect IsChild GetClassNameA GetKeyState DestroyIcon RegisterWindowMessageA

gdi32

GetStockObject SelectObject SetBkColor SetTextColor GetTextExtentPoint32A CreateSolidBrush DeleteObject GetObjectA CreateCompatibleDC GetDIBits DeleteDC GetObjectType CreateDIBSection BitBlt CreateBitmap SetPixel

comctl32

InitCommonControlsEx

ole32

CoInitialize CoTaskMemFree RevokeDragDrop

shell32

ShellExecuteExA

winmm

timeBeginPeriod

shlwapi

PathRemoveArgsA PathGetArgsA PathAddBackslashA PathQuoteSpacesA