a1d1d6c6b20060141807702114180840_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a1d1d6c6b20060141807702114180840_NeikiAnalytics.exe
Size 648KB
Sample240603-nl3mvsch2t
SHA256 b703235d8b05c1b0ce8f1e865dc953a2f8518602442db63423b724dfa520130d
MD5 a1d1d6c6b20060141807702114180840
SHA1 892fe33b658c5176c11e218f53d7b71a0801c53d
SHA512 987ece5e19bfea0e492887079a37e74e4dc503260616b529d482da5d787feda887f2f35b294b79fefa0dbc621535b13e2861589389d4778b3fd06e498927b2e6
SSDEEP 12288:oqz2DWU/Sbwoqg0fitGbna8dQcLk/+cb1q86pJDlAF44bE2cSX:Jz2DWlbl0fitGbna8FLk2m1X2D4brr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1d1d6c6b20060141807702114180840_NeikiAnalytics.exe

File Explorer

a1d1d6c6b20060141807702114180840_NeikiAnalytics.exe

.exe 648KB

a1d1d6c6b20060141807702114180840_NeikiAnalytics.exe

IMPHASH c54f40d6023142651a792ae38ae262de
SHA256 b703235d8b05c1b0ce8f1e865dc953a2f8518602442db63423b724dfa520130d
MD5 a1d1d6c6b20060141807702114180840
SHA1 892fe33b658c5176c11e218f53d7b71a0801c53d
SHA512 987ece5e19bfea0e492887079a37e74e4dc503260616b529d482da5d787feda887f2f35b294b79fefa0dbc621535b13e2861589389d4778b3fd06e498927b2e6
SSDEEP 12288:oqz2DWU/Sbwoqg0fitGbna8dQcLk/+cb1q86pJDlAF44bE2cSX:Jz2DWlbl0fitGbna8FLk2m1X2D4brr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mscorsvw.pdb

mscoree

GetRequestedRuntimeInfo GetRealProcAddress

msvcr80

?_type_info_dtor_internal_method@type_info@@QEAAXXZ __crt_debugger_hook _decode_pointer _onexit _lock __dllonexit _unlock ?terminate@@YAXXZ __set_app_type _encode_pointer _fmode _commode __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln exit _cexit _ismbblead _exit _XcptFilter __C_specific_handler __getmainargs _amsg_exit free malloc _vsnprintf _snwprintf_s wcstoul wcscat_s towupper _vsnwprintf_s _errno _vsnprintf_s strcpy_s wcsncpy_s wcscpy_s memmove _purecall _wcsicmp memcmp memcpy _CxxThrowException __CxxFrameHandler3 memset

advapi32

RegOpenKeyExA RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

kernel32

VirtualAlloc SleepEx ReleaseMutex CreateMutexW WaitForSingleObjectEx HeapFree GetProcessHeap HeapAlloc TlsFree TlsAlloc TlsSetValue ReleaseSemaphore CreateSemaphoreW ResetEvent DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetCurrentProcessId VirtualFree GetVersionExA RaiseException CloseHandle GetSystemTimeAsFileTime QueryPerformanceCounter GetCurrentThreadId VirtualQuery VirtualProtect HeapCreate HeapDestroy HeapValidate Sleep GetStartupInfoA SetUnhandledExceptionFilter GetTickCount UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext LoadLibraryExW GetCommandLineW GetCurrentProcess SetEvent GetModuleHandleW OpenProcess LoadLibraryW TerminateProcess GetModuleFileNameW GetProcAddress CreateEventW WaitForMultipleObjects IsDebuggerPresent OpenEventW DebugBreak CreateThread TlsGetValue FreeLibrary GetLastError SetLastError LocalFree MultiByteToWideChar GetACP GetCPInfo WideCharToMultiByte FormatMessageW GetEnvironmentVariableW lstrlenW

user32

LoadStringW PeekMessageW DispatchMessageW MessageBoxW MsgWaitForMultipleObjects

ole32

CoRegisterClassObject CoInitializeEx CoReleaseServerProcess CoAddRefServerProcess CoUninitialize CoRevokeClassObject

oleaut32

SetErrorInfo SysStringLen