a333d8a1cb9b1e345a893e44e8faabd0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
a333d8a1cb9b1e345a893e44e8faabd0_NeikiAnalytics.exe
Size 592KB
Sample240603-pgjvmaeb5v
SHA256 1e124f7588e36fade2a708dda691f7405f28063a9975db50410053d0a756eb10
MD5 a333d8a1cb9b1e345a893e44e8faabd0
SHA1 278323e825f4685bad516ee84f5c0ca0e982eeb4
SHA512 b81c62c7a2cc19e9b074f4afe79ebccd190b2c81922e70888840d1d1ce2f0db4cce2633da8b2d1844939c21a7fbaf6e8e986cc081a0ddd4d0f85d47468e52892
SSDEEP 12288:2mXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:NsqjnhMgeiCl7G0nehbGZpbD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a333d8a1cb9b1e345a893e44e8faabd0_NeikiAnalytics.exe

File Explorer

a333d8a1cb9b1e345a893e44e8faabd0_NeikiAnalytics.exe

.exe 592KB

a333d8a1cb9b1e345a893e44e8faabd0_NeikiAnalytics.exe

IMPHASH defd364413b54f2ac47ef85668f961f9
SHA256 1e124f7588e36fade2a708dda691f7405f28063a9975db50410053d0a756eb10
MD5 a333d8a1cb9b1e345a893e44e8faabd0
SHA1 278323e825f4685bad516ee84f5c0ca0e982eeb4
SHA512 b81c62c7a2cc19e9b074f4afe79ebccd190b2c81922e70888840d1d1ce2f0db4cce2633da8b2d1844939c21a7fbaf6e8e986cc081a0ddd4d0f85d47468e52892
SSDEEP 12288:2mXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:NsqjnhMgeiCl7G0nehbGZpbD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

t:\visio\x86\ship\0\vpreview.pdb

msvcr80

_invoke_watson ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common _crt_debugger_hook _controlfp_s _decode_pointer _onexit _lock __dllonexit _unlock __set_app_type _encode_pointer __p__fmode __p__commode _adjust_fdiv __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln exit _ismbblead _XcptFilter _exit _cexit __getmainargs _amsg_exit memset fopen_s fwprintf_s fclose vsprintf_s wcscpy_s vswprintf_s wcstok memmove_s memcpy_s ??0exception@std@@QAE@XZ _vsnwprintf wcsrchr ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??3@YAXPAX@Z _invalid_parameter_noinfo ??2@YAPAXI@Z _CxxThrowException ??0exception@std@@QAE@ABV01@@Z __CxxFrameHandler3 ??0exception@std@@QAE@ABQBD@Z

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

kernel32

HeapReAlloc GetCurrentProcessId HeapDestroy IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange HeapAlloc HeapFree GetTempPathA GetTempFileNameA CreateProcessA CloseHandle GetModuleHandleW GetProcAddress GetProcessHeap GetSystemTimeAsFileTime HeapSize GetCurrentThreadId GetTickCount QueryPerformanceCounter VirtualProtect GetUserDefaultUILanguage GetModuleFileNameW LoadLibraryW SetEvent CreateEventW GetFileAttributesW

ole32

CoCreateInstance CoInitialize CoRegisterClassObject CoRevokeClassObject CoUninitialize CoAddRefServerProcess CoReleaseServerProcess IsAccelerator

user32

GetClientRect MoveWindow DestroyWindow SetFocus GetFocus GetWindow MsgWaitForMultipleObjects PeekMessageW DispatchMessageW TranslateMessage IsChild MessageBoxW LoadStringW

advapi32

RegOpenKeyExW RegQueryValueExA RegOpenKeyExA RegCloseKey RegQueryValueExW