a44b83de30baf1e3b7f3b26f46743e40_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a44b83de30baf1e3b7f3b26f46743e40_NeikiAnalytics.exe
Size 408KB
Sample240603-p8s8dagf87
SHA256 494a7c41600ded7278687f20bb6fd48b120ccde7e9b790210358132cf02a1526
MD5 a44b83de30baf1e3b7f3b26f46743e40
SHA1 818554b2fb695b90a081d76c20bea95004e10209
SHA512 c4ab79dc5a703fba1a5fee68d145cb6717e3e718c67e1a8825bd99fdd3119fc3df28f816ca905199b92b4e4be7d79f5b3a37aa8104a166fda317b859c3560c14
SSDEEP 12288:lpgvmzFHi0mo5aH0qMzd58S7FgpZPJQPDHvd:lpgvOHi0mGaH0qSdVFgpT4V
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a44b83de30baf1e3b7f3b26f46743e40_NeikiAnalytics.exe

File Explorer

a44b83de30baf1e3b7f3b26f46743e40_NeikiAnalytics.exe

.exe 408KB

a44b83de30baf1e3b7f3b26f46743e40_NeikiAnalytics.exe

IMPHASH a1161b9f4081312e64af594f73664c29
SHA256 494a7c41600ded7278687f20bb6fd48b120ccde7e9b790210358132cf02a1526
MD5 a44b83de30baf1e3b7f3b26f46743e40
SHA1 818554b2fb695b90a081d76c20bea95004e10209
SHA512 c4ab79dc5a703fba1a5fee68d145cb6717e3e718c67e1a8825bd99fdd3119fc3df28f816ca905199b92b4e4be7d79f5b3a37aa8104a166fda317b859c3560c14
SSDEEP 12288:lpgvmzFHi0mo5aH0qMzd58S7FgpZPJQPDHvd:lpgvOHi0mGaH0qSdVFgpT4V
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

142227

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpiA CreateThread GetLogicalDriveStringsA GetDriveTypeA GetWindowsDirectoryA MoveFileA FreeLibrary EnumResourceNamesA LoadLibraryA GetProcAddress GetModuleHandleA GetSystemInfo GetVersionExA SetThreadPriority GetCurrentThread FreeResource UpdateResourceA SizeofResource LockResource LoadResource FindResourceA EnumResourceLanguagesA EndUpdateResourceA BeginUpdateResourceA CreateMutexA GetLastError WaitForSingleObject GetVolumeInformationA GetComputerNameA GetCurrentProcess OpenMutexA SetPriorityClass GetTempPathA GetModuleFileNameA GetSystemDirectoryA SetErrorMode InitializeCriticalSection HeapAlloc GetProcessHeap HeapFree WideCharToMultiByte MultiByteToWideChar ExitThread GetTimeFormatA GetDateFormatA GetFileSize SetFileAttributesA GlobalUnlock GlobalLock GlobalAlloc ExitProcess SetFileTime SystemTimeToFileTime GetSystemTime CreateDirectoryA CreateProcessA GetCurrentProcessId SetEnvironmentVariableA CompareStringW CompareStringA HeapSize GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter SetStdHandle HeapReAlloc GetLocaleInfoA GetExitCodeProcess GetStringTypeW GetStringTypeA VirtualFree HeapCreate HeapDestroy GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetStdHandle VirtualAlloc VirtualProtect GetCPInfo FlushFileBuffers GetOEMCP GetACP LCMapStringW LCMapStringA VirtualQuery InterlockedExchange RtlUnwind TerminateProcess GetCommandLineA GetStartupInfoA SetFilePointer WriteFile CreateFileA ReadFile CloseHandle Sleep FindFirstFileA lstrcpyA lstrcatA lstrcmpA GetTimeZoneInformation EnterCriticalSection LeaveCriticalSection DeleteFileA lstrcpynA GetTickCount GetFileAttributesA lstrlenA CopyFileA FindNextFileA FindClose

user32

TranslateMessage GetMessageA UpdateWindow RegisterClassA DispatchMessageA wsprintfA GetWindowRect GetDesktopWindow ShowWindow EnableWindow GetClassNameA DestroyWindow UnregisterClassA PostMessageA GetWindowThreadProcessId GetWindowTextA IsWindowVisible EnumWindows IsWindowEnabled LookupIconIdFromDirectoryEx GetCursorPos SetCursorPos GetSystemMetrics ReleaseDC GetWindowDC SetClipboardData EmptyClipboard SendInput SendMessageTimeoutA RegisterWindowMessageA SetWindowPos PostQuitMessage GetClientRect GetWindowInfo GetWindow GetWindowPlacement MessageBoxA EnumChildWindows SetWindowTextA SetForegroundWindow SetFocus

gdi32

CreateCompatibleDC CreateCompatibleBitmap SelectObject BitBlt DeleteDC GetDIBits DeleteObject

advapi32

SetSecurityDescriptorGroup ChangeServiceConfigA GetUserNameA SetSecurityDescriptorOwner SetSecurityDescriptorDacl InitializeSecurityDescriptor AddAccessAllowedAce InitializeAcl GetLengthSid GetTokenInformation SetFileSecurityA SetSecurityDescriptorSacl

shell32

ShellExecuteA SHGetSpecialFolderLocation SHGetPathFromIDListA SHGetMalloc

ws2_32

inet_addr WSACreateEvent WSAEventSelect WSAWaitForMultipleEvents WSAEnumNetworkEvents WSACloseEvent sendto WSAGetLastError gethostbyaddr accept getpeername shutdown inet_ntoa select __WSAFDIsSet recv send closesocket htons

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

rpcrt4

UuidCreate UuidToStringA RpcStringFreeA