a2a40fe27d03d0f57f34c35104a79830_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a2a40fe27d03d0f57f34c35104a79830_NeikiAnalytics.exe
Size 425KB
Sample240603-n5jdbseh79
SHA256 e1d1f7011b1686d205677c89312a6fe6e3fe2582394aee894024b54bf6ade425
MD5 a2a40fe27d03d0f57f34c35104a79830
SHA1 1db02ac05edc60dc023a8045c7fff6148342bc8d
SHA512 5c2823a10b5fcb066e57a4d8ca8e4b915338f32587bf7eed86d57ff4c88bf961fde2e0b8e373edc5deb995cfce0fbca6a68306e6771f479a43e928015d9fdc8a
SSDEEP 6144:LqTNAZGQjLMSUlzPIdVLAloxKEL5/orpGXrF40S9yntDlsv2WA:LqvQjQSAzPIdVjxKC/oAXy/9yndN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2a40fe27d03d0f57f34c35104a79830_NeikiAnalytics.exe

File Explorer

a2a40fe27d03d0f57f34c35104a79830_NeikiAnalytics.exe

.exe 425KB

a2a40fe27d03d0f57f34c35104a79830_NeikiAnalytics.exe

IMPHASH dcf71cf9143ab62466fb11500acac90a
SHA256 e1d1f7011b1686d205677c89312a6fe6e3fe2582394aee894024b54bf6ade425
MD5 a2a40fe27d03d0f57f34c35104a79830
SHA1 1db02ac05edc60dc023a8045c7fff6148342bc8d
SHA512 5c2823a10b5fcb066e57a4d8ca8e4b915338f32587bf7eed86d57ff4c88bf961fde2e0b8e373edc5deb995cfce0fbca6a68306e6771f479a43e928015d9fdc8a
SSDEEP 6144:LqTNAZGQjLMSUlzPIdVLAloxKEL5/orpGXrF40S9yntDlsv2WA:LqvQjQSAzPIdVjxKC/oAXy/9yndN
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

117252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetProcessShutdownParameters CreateThread ResetEvent ExitProcess EnterCriticalSection TerminateThread LeaveCriticalSection GetCurrentThreadId WaitForMultipleObjects GetStdHandle ReadFile GetFileSize GetCommandLineW CreatePipe SetEvent ExitThread GetModuleHandleW GlobalAlloc GlobalLock GlobalUnlock GlobalFree lstrlenW GetTempPathW LoadLibraryW GetProcAddress GetCurrentProcess GetFullPathNameW GetLongPathNameW GetModuleFileNameW GetFileInformationByHandle CreateToolhelp32Snapshot Process32FirstW OpenProcess Process32NextW ExpandEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetFileAttributesW GetVersion VirtualAlloc HeapCreate CreateEventW HeapAlloc InterlockedCompareExchange InterlockedExchange DeleteCriticalSection MoveFileExW CreateFileA GetProcessHeap SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoW InitializeCriticalSectionAndSpinCount GetModuleHandleA GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoA GetFileType SetHandleCount IsValidCodePage GetOEMCP GetACP HeapReAlloc VirtualFree InitializeCriticalSection SetUnhandledExceptionFilter SetErrorMode GetTickCount WaitForSingleObject CreateProcessW SetFileAttributesW DeleteFileW LoadLibraryA CopyFileW GetModuleFileNameA HeapSize SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue LocalFree GetStringTypeW LCMapStringW LCMapStringA GetCPInfo RtlUnwind RaiseException GetStartupInfoW WriteFile Sleep GetSystemInfo GetLastError GetDiskFreeSpaceExW GetDriveTypeW GetLogicalDriveStringsW GlobalMemoryStatusEx GetSystemTimeAsFileTime CloseHandle GetFileTime CreateFileW GetVersionExW GetVolumeInformationW GetVolumePathNameW GetSystemDirectoryW InterlockedDecrement HeapFree IsDebuggerPresent UnhandledExceptionFilter TerminateProcess InterlockedIncrement

user32

SetFocus GetSysColor SendMessageW SetTimer EnableWindow GetForegroundWindow LoadImageW LoadIconW FlashWindow AttachThreadInput SetCursor CharLowerW GetSystemMetrics RedrawWindow MessageBoxW BeginPaint EndPaint DefWindowProcW ShowWindow DestroyWindow PostMessageW KillTimer LoadCursorW SetRect DrawIconEx GetSysColorBrush RegisterClassExW AdjustWindowRectEx CreateWindowExW SetParent GetMessageW IsDialogMessageW TranslateMessage DispatchMessageW SetWindowTextW GetWindowLongW SetWindowPos PostQuitMessage SetWindowLongW

gdi32

GetStockObject GetObjectW SelectObject CreateBitmap CreateCompatibleDC BitBlt SetDIBitsToDevice CreateFontIndirectW

gdiplus

GdiplusShutdown GdiplusStartup GdipGetImageWidth GdipLoadImageFromStream GdipDrawImageRectI GdipFillRectangleI GdipGetImageHeight GdipCreateFromHDC GdipDisposeImage GdipCreateSolidFill GdipDeleteBrush GdipDeleteGraphics

shlwapi

StrCpyW PathCreateFromUrlW AssocQueryStringW

comctl32

InitCommonControlsEx

comdlg32

GetSaveFileNameW

advapi32

RegQueryInfoKeyW RegSetValueExW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW CryptGenRandom CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW RegEnumKeyExW

shell32

ShellExecuteW ord190 ord680 ord155 SHOpenFolderAndSelectItems SHGetFolderPathW

ole32

OleSetContainedObject OleCreate OleLockRunning CoInitializeEx CoCreateInstance CoUninitialize CoSetProxyBlanket CoTaskMemFree GetHGlobalFromStream CreateStreamOnHGlobal

oleaut32

VariantClear VariantInit SysFreeString SysAllocString

wininet

HttpOpenRequestW HttpSendRequestW InternetQueryOptionW InternetCloseHandle HttpQueryInfoW InternetReadFile InternetConnectW InternetSetOptionW InternetOpenW HttpQueryInfoA

powrprof

CallNtPowerInformation

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW