a3d1ebf536bd3c251e4f17d1652e0bd0_NeikiAnalytics[.]exe

General

Target
a3d1ebf536bd3c251e4f17d1652e0bd0_NeikiAnalytics.exe
Size 372KB
Sample240603-pxtd1aeg7s
SHA256 20d6d0a8362ee25fb38f8140e43a7f0ccd17e6eb01216834c8acaae1adc61c9c
MD5 a3d1ebf536bd3c251e4f17d1652e0bd0
SHA1 61e1615019f4befda2e48a523bcf98a191a91522
SHA512 fa607bfba51df3aa86b13092e8a5ccabe1ae2251814e6a3805ec2c0a91a6a7c1d1dfb4ca82a2af59ba20b5edee1d2af81b64308ecb4b4854548abb5bab3ed4c9
SSDEEP 6144:GHJ0IX0lOQ9ZYR8B2vTGpsfrBhnkYjqTuIDXo3/Qnu+z:GHvElnZYLvTGparBGYkuIk3/C
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3d1ebf536bd3c251e4f17d1652e0bd0_NeikiAnalytics.exe

File Explorer

a3d1ebf536bd3c251e4f17d1652e0bd0_NeikiAnalytics.exe

.exe 372KB

a3d1ebf536bd3c251e4f17d1652e0bd0_NeikiAnalytics.exe

IMPHASH 3a332da2de6780ea892d9230b040d593
SHA256 20d6d0a8362ee25fb38f8140e43a7f0ccd17e6eb01216834c8acaae1adc61c9c
MD5 a3d1ebf536bd3c251e4f17d1652e0bd0
SHA1 61e1615019f4befda2e48a523bcf98a191a91522
SHA512 fa607bfba51df3aa86b13092e8a5ccabe1ae2251814e6a3805ec2c0a91a6a7c1d1dfb4ca82a2af59ba20b5edee1d2af81b64308ecb4b4854548abb5bab3ed4c9
SSDEEP 6144:GHJ0IX0lOQ9ZYR8B2vTGpsfrBhnkYjqTuIDXo3/Qnu+z:GHvElnZYLvTGparBGYkuIk3/C
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

238040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\src\strummer\tools\dbclient\dbclient.pdb

user32

LoadStringA MessageBoxA

kernel32

SetEnvironmentVariableA CompareStringW CompareStringA GetCurrentProcessId GetTickCount QueryPerformanceCounter CloseHandle GetLastError CreateMutexA SetLastError GetProcAddress FreeLibrary LoadLibraryA MultiByteToWideChar GetTempPathA GetVersionExA WideCharToMultiByte AreFileApisANSI GetFileAttributesA DeleteFileA Sleep GetFileAttributesW DeleteFileW GetTempPathW ReadFile WriteFile SetFilePointer FlushFileBuffers SetEndOfFile GetFileSize LockFile LockFileEx UnlockFile GetFullPathNameA GetFullPathNameW LoadLibraryW GetSystemTime GetSystemTimeAsFileTime TlsSetValue TlsGetValue TlsAlloc CreateFileA CreateFileW InterlockedDecrement InterlockedIncrement InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetStdHandle RtlUnwind RaiseException GetModuleHandleA GetStartupInfoA GetCommandLineA HeapFree HeapAlloc HeapReAlloc LCMapStringA LCMapStringW GetCPInfo GetCurrentThreadId TlsFree SetUnhandledExceptionFilter ExitProcess TerminateProcess GetCurrentProcess GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr GetTimeZoneInformation GetLocaleInfoA VirtualProtect GetSystemInfo VirtualQuery GetStringTypeA GetStringTypeW HeapSize IsBadReadPtr IsBadCodePtr GetACP GetOEMCP

Sharing