a2d904ba79f18e7de9acc8758d4d0570_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a2d904ba79f18e7de9acc8758d4d0570_NeikiAnalytics.exe
Size 24KB
Sample240603-pahc8afb43
SHA256 e37ccc9278b7f0cf470f3b54317b16fc58d34e4cce16ad6cc1b1f867586cd0d9
MD5 a2d904ba79f18e7de9acc8758d4d0570
SHA1 46d7d20b8f0040772f5b548f78cb2b5bd70f6fcb
SHA512 343de524ffdbfc24f33435d6f90019da0138a86712020777f524f8d6d15057dc8135bb109ad4469e1faa983da536abcd67ed9217bbd09bbe0fa3e0f8cc6f3085
SSDEEP 192:xBHG1+A+aGC2aRH21Nw1InkQBgwnSJTVqQBgwzF8+UU61oyQEla7Kn37P:xxq/+a92s70kNo/NeFsU61iEla7Kn3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2d904ba79f18e7de9acc8758d4d0570_NeikiAnalytics.exe

File Explorer

a2d904ba79f18e7de9acc8758d4d0570_NeikiAnalytics.exe

.exe 24KB

a2d904ba79f18e7de9acc8758d4d0570_NeikiAnalytics.exe

IMPHASH 1013b759b336b9fbdd391681a68b9a8d
SHA256 e37ccc9278b7f0cf470f3b54317b16fc58d34e4cce16ad6cc1b1f867586cd0d9
MD5 a2d904ba79f18e7de9acc8758d4d0570
SHA1 46d7d20b8f0040772f5b548f78cb2b5bd70f6fcb
SHA512 343de524ffdbfc24f33435d6f90019da0138a86712020777f524f8d6d15057dc8135bb109ad4469e1faa983da536abcd67ed9217bbd09bbe0fa3e0f8cc6f3085
SSDEEP 192:xBHG1+A+aGC2aRH21Nw1InkQBgwnSJTVqQBgwzF8+UU61oyQEla7Kn37P:xxq/+a92s70kNo/NeFsU61iEla7Kn3
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7982

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

maptxt

?MapWinTitl@@YAXPAVCWnd@@I@Z ?TranString@@YAXPAVCString@@I@Z ?TestAndCreate@@YAXVCString@@@Z ?InitStrTranslation@CPrxLangSet@@QAEHVCString@@PAHH@Z ?SetCurrentLang@@YAXPAVCPrxLangSet@@@Z ?MapWinPrmt@@YAXPAVCWnd@@II@Z ??0CPrxLangSet@@QAE@PAVCDatabase@@@Z

mfc42

ord4998 ord1261 ord4376 ord4673 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord815 ord561 ord825 ord610 ord800 ord775 ord641 ord2514 ord535 ord537 ord2621 ord1134 ord1911 ord3316 ord3314 ord5242 ord6121 ord1774 ord2490 ord5658 ord2395 ord6322 ord2609 ord1006 ord1787 ord6123 ord4291 ord1994 ord5192 ord860 ord540 ord503 ord5699 ord5708 ord5703 ord5697 ord5010 ord2721 ord5265 ord4853 ord1576 ord6052 ord4078 ord1775 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord5280 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord1146 ord1168 ord324 ord4234 ord5953 ord4099 ord1567 ord1200 ord939 ord2818 ord6877 ord2820 ord268 ord858 ord4278 ord6663 ord2764 ord4710 ord2379 ord755 ord470

msvcrt

__p__commode _controlfp __CxxFrameHandler atol _except_handler3 ?terminate@@YAXXZ __dllonexit _onexit ??1type_info@@UAE@XZ _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __set_app_type __p__fmode _setmbcp

kernel32

GetStartupInfoA GetModuleHandleA GetCommandLineA

user32

DrawIcon GetClientRect GetSystemMetrics IsIconic EnableWindow LoadIconA SendMessageA